osCommerce osCommerce vulnerabilities
5 published CVEs name osCommerce osCommerce among the affected products.
- Published CVEs
- 5
- Last 12 months
- 3
- Critical
- 1
- Known exploited
- 0
Critical 1High 3Medium 1Low 0Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20263
Newest CVEs
- CVE-2019-25497
osCommerce 2.3.4.1 SQL Injection via currency Parameter
Oscommerce · osCommerce
High8.8 - CVE-2019-25496
osCommerce 2.3.4.1 SQL Injection via products_id Parameter
Oscommerce · osCommerce
High8.8 - CVE-2019-25495
osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter
Oscommerce · osCommerce
High8.8 - CVE-2009-20006
osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
osCommerce · osCommerce
Critical9.3 - CVE-2025-40674
Reflected Cross-Site Scripting (XSS) in osCommerce
osCommerce · osCommerce
Medium5.1