Oscommerce

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-25497 HIGH POC This Week

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. [CVSS 8.2 HIGH]

PHP SQLi Oscommerce

NVD Exploit-DB

CVSS 3.1

8.2

EPSS

0.1%

CVE-2019-25496 HIGH POC This Week

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id parameter. [CVSS 8.2 HIGH]

PHP SQLi Oscommerce

NVD Exploit-DB

CVSS 3.1

8.2

EPSS

0.1%

CVE-2019-25495 HIGH POC This Week

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviews_id parameter. [CVSS 8.2 HIGH]

PHP SQLi Oscommerce

NVD Exploit-DB

CVSS 3.1

8.2

EPSS

0.1%

CVE-2019-25497

EPSS 0% CVSS 8.2

HIGH POC This Week

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. [CVSS 8.2 HIGH]

PHP SQLi Oscommerce

NVD Exploit-DB

CVE-2019-25496

EPSS 0% CVSS 8.2

HIGH POC This Week

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id parameter. [CVSS 8.2 HIGH]

PHP SQLi Oscommerce

NVD Exploit-DB

CVE-2019-25495

EPSS 0% CVSS 8.2

HIGH POC This Week

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviews_id parameter. [CVSS 8.2 HIGH]

PHP SQLi Oscommerce

NVD Exploit-DB