Vendor

    Os Commerce

    97 known vulnerabilities in products by Os Commerce, 0 of them actively exploited (CISA KEV).

    Key figures

    97

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Os Commerce
    CriticalCVE-2018-25114

    osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution

    		—
    CriticalCVE-2020-27976

    osCommerce: OS Command Injection

    		9.8
    CriticalCVE-2023-6579

    osCommerce POST Parameter shopping-cart sql injection

    		7.3
    CriticalCVE-2009-20006

    osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

    		—
    HighCVE-2018-18573

    osCommerce: Code Execution

    		7.2
    HighCVE-2018-18572

    osCommerce: Code Execution

    		7.2
    CriticalCVE-2020-23360

    osCommerce: security vulnerability

    		9.8
    Not ratedCVE-2004-2044

    Francisco Burzi Php-nuke: security vulnerability

    also in 2 other products

    		—
    Not ratedCVE-2005-2330

    osCommerce: Path Traversal

    		—
    Not ratedCVE-2002-1991

    osCommerce: File Inclusion

    		—
    Not ratedCVE-2006-5190

    osCommerce: Cross-Site Scripting (XSS)

    		—
    HighCVE-2019-25497

    osCommerce 2.3.4.1 SQL Injection via currency Parameter

    		8.2
    HighCVE-2019-25496

    osCommerce 2.3.4.1 SQL Injection via products_id Parameter

    		8.2
    HighCVE-2019-25495

    osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter

    		8.2
    Not ratedCVE-2004-2021

    osCommerce: Path Traversal

    		—
    HighCVE-2020-27975

    osCommerce: Cross-Site Request Forgery (CSRF)

    		8.8
    Not ratedCVE-2012-1059

    osCommerce Online Merchant: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2003-1219

    osCommerce: Cross-Site Scripting (XSS)

    		—
    MediumCVE-2020-12058

    osCommerce Ce Phoenix: Cross-Site Scripting (XSS)

    		6.1
    Not ratedCVE-2008-0719

    osCommerce Customer Testimonials: SQL Injection

    		—
    MediumCVE-2020-29070

    osCommerce: Cross-Site Scripting (XSS)

    		4.8
    Not ratedCVE-2002-2019

    osCommerce: File Inclusion

    		—
    Not ratedCVE-2011-4543

    osCommerce: Path Traversal

    		—
    MediumCVE-2026-105226

    osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

    		4.7
    MediumCVE-2018-18964

    osCommerce Online Merchant: security vulnerability

    		4.9

    All vulnerabilities in search

    Products

    Products by Os Commerce
    Os Commerce800
    osCommerce Online Merchant100