osCommerce vulnerabilities
8 published CVEs name osCommerce among the affected products.
- Published CVEs
- 8
- Last 12 months
- 5
- Critical
- 2
- Known exploited
- 0
Critical 2High 3Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20253
- 20265
Newest CVEs
- CVE-2026-105226
osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
osCommerce · osCommerce2
Medium5.1 - CVE-2026-105225
osCommerce osCommerce2 Payment payment.php include code injection
osCommerce · osCommerce2
Medium4.8 - CVE-2019-25497
osCommerce 2.3.4.1 SQL Injection via currency Parameter
Oscommerce · osCommerce
High8.8 - CVE-2019-25496
osCommerce 2.3.4.1 SQL Injection via products_id Parameter
Oscommerce · osCommerce
High8.8 - CVE-2019-25495
osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter
Oscommerce · osCommerce
High8.8 - CVE-2009-20006
osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
osCommerce · osCommerce
Critical9.3 - CVE-2018-25114
osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution
osCommerce · Online Merchant
Critical9.3 - CVE-2025-40674
Reflected Cross-Site Scripting (XSS) in osCommerce
osCommerce · osCommerce
Medium5.1