Vulnerabilities in osCommerce
6 resultsCVE-2018-25114CRITICALosCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code ExecutionEPSS 2.8%CVE-2009-20006CRITICALosCommerce <= 2.2 Admin File Manager Arbitrary PHP Code ExecutionEPSS 1.1%CVE-2025-40674MEDIUMReflected Cross-Site Scripting (XSS) in osCommerceEPSS 0.4%CVE-2019-25497HIGHosCommerce 2.3.4.1 SQL Injection via currency ParameterEPSS 0.3%CVE-2019-25495HIGHosCommerce 2.3.4.1 SQL Injection via reviews_id ParameterEPSS 0.3%CVE-2019-25496HIGHosCommerce 2.3.4.1 SQL Injection via products_id ParameterEPSS 0.3%