Oscommerce Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

E-Commerce Management Software16

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

osCommerce Japanese2
osCommerce Online Merchant2
osCommerce Luottokunta2
osCommerce File Manager2
osCommerce Phoenix CE2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Remediation

Official Fix8
Temporary Fix0
Workaround0
Unavailable2
Not Defined6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploitability

High2
Functional0
Proof-of-Concept0
Unproven2
Not Defined12

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Access Vector

Not Defined0
Physical0
Local2
Adjacent0
Network14

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Authentication

Not Defined0
High0
Low6
None10

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

User Interaction

Not Defined0
Required2
None14

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

C3BM Index

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Base

≤10
≤20
≤30
≤42
≤50
≤66
≤70
≤86
≤90
≤102

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤52
≤64
≤70
≤86
≤92
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

VulDB

≤10
≤20
≤30
≤42
≤52
≤64
≤72
≤84
≤90
≤102

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤90
≤102

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit 0-day

<1k2
<2k6
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Today

<1k16
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Market Volume

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

🔴 CTI Activities

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Affected Products (10): CE Phoenix (1), Customer Testimonials (1), File Manager (1), Finnish Bank Payment (1), Japanese (1), Luottokunta (1), Online Merchant (5), PHP Point Of Sale (1), Phoenix CE (2), Poll Booth (1)

PublishedBaseTempVulnerabilityProdExpRemEPSSCTICVE
10/28/20208.07.7osCommerce Phoenix CE POST Parameter mail.php os command injectionE-Commerce Management SoftwareNot DefinedOfficial Fix0.026660.03CVE-2020-27976
10/28/20206.15.9osCommerce Phoenix CE define_language.php cross-site request forgeryE-Commerce Management SoftwareNot DefinedOfficial Fix0.001120.00CVE-2020-27975
09/03/20205.24.9osCommerce CE Phoenix order_status.php cross site scriptingE-Commerce Management SoftwareNot DefinedOfficial Fix0.000780.05CVE-2020-12058
06/28/20155.45.4osCommerce Japanese File path traversalE-Commerce Management SoftwareNot DefinedNot Defined0.001770.04CVE-2015-2965
01/13/20156.36.0osCommerce Online Merchant update_zone sql injectionE-Commerce Management SoftwareProof-of-ConceptOfficial Fix0.003950.00CVE-2014-10033
09/19/20125.35.1osCommerce Online Merchant unknown vulnerabilityE-Commerce Management SoftwareNot DefinedOfficial Fix0.002140.00CVE-2012-2991
05/27/20124.34.1osCommerce Online Merchant cross site scriptingE-Commerce Management SoftwareHighOfficial Fix0.001320.02CVE-2012-2935
05/27/20124.34.3osCommerce Online Merchant Error Message cross site scriptingE-Commerce Management SoftwareNot DefinedNot Defined0.001170.00CVE-2012-1792
02/13/20124.34.1osCommerce Online Merchant cross site scriptingE-Commerce Management SoftwareProof-of-ConceptOfficial Fix0.007670.00CVE-2012-1059
06/12/20099.88.5osCommerce Luottokunta privileges managementE-Commerce Management SoftwareUnprovenOfficial Fix0.004070.02CVE-2009-2039

5 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 5 results.

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!