osCommerce osCommerce 2.2 release candidate 2a

CPE Details

osCommerce osCommerce 2.2 release candidate 2a
oscommerce
oscommerce
2.2
2008-09-23
15h42 +00:00
2012-11-13
22h50 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:oscommerce:oscommerce:2.2:rc_2a:*:*:*:*:*:*

Informations

Vendor

oscommerce

Product

oscommerce

Version

2.2

Update

rc_2a

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-35212 2022-08-18 17h30 +00:00 osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error().
6.1
Medium
CVE-2015-2965 2015-06-28 17h00 +00:00 Directory traversal vulnerability in osCommerce Japanese 2.2ms1j-R8 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors.
4
CVE-2009-2038 2009-06-12 15h28 +00:00 Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges.
10
CVE-2009-2039 2009-06-12 15h28 +00:00 Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders.
10
CVE-2009-0408 2009-02-03 18h00 +00:00 Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators.
6
CVE-2008-4170 2008-09-22 16h00 +00:00 create_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message.
5
CVE-2008-0719 2008-02-12 00h00 +00:00 SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonial_id parameter.
7.5
CVE-2006-5190 2006-10-06 17h00 +00:00 Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, or (q) zones.php scripts in /admin, and the (2) zpage parameter in (r) admin/geo_zones.php.
4.3
CVE-2003-1219 2005-08-04 02h00 +00:00 Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.
4.3