Oscommerce Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

E-Commerce Management Software16

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

osCommerce Phoenix CE4
osCommerce Customer Testimonials2
osCommerce PHP Point Of Sale2
osCommerce Online Merchant2
osCommerce Japanese2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Remediation

Official Fix10
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploitability

High0
Functional0
Proof-of-Concept4
Unproven4
Not Defined8

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Access Vector

Not Defined0
Physical0
Local0
Adjacent0
Network16

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Authentication

Not Defined0
High0
Low8
None8

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

User Interaction

Not Defined0
Required2
None14

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

C3BM Index

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤62
≤74
≤86
≤90
≤104

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤66
≤72
≤84
≤94
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

VulDB

≤10
≤20
≤30
≤42
≤50
≤62
≤74
≤84
≤90
≤104

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤92
≤102

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit 0-day

<1k2
<2k6
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Today

<1k16
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Market Volume

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

🔴 CTI Activities

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Affected Products (10): CE Phoenix (1), Customer Testimonials (1), File Manager (1), Finnish Bank Payment (1), Japanese (1), Luottokunta (1), Online Merchant (5), PHP Point Of Sale (1), Phoenix CE (2), Poll Booth (1)

PublishedBaseTempVulnerabilityProdExpRemEPSSCTICVE
10/28/20208.07.7osCommerce Phoenix CE POST Parameter mail.php os command injectionE-Commerce Management SoftwareNot DefinedOfficial Fix0.013460.05CVE-2020-27976
10/28/20206.15.9osCommerce Phoenix CE define_language.php cross-site request forgeryE-Commerce Management SoftwareNot DefinedOfficial Fix0.001120.00CVE-2020-27975
09/03/20205.24.9osCommerce CE Phoenix order_status.php cross site scriptingE-Commerce Management SoftwareNot DefinedOfficial Fix0.001070.00CVE-2020-12058
06/28/20155.45.4osCommerce Japanese File path traversalE-Commerce Management SoftwareNot DefinedNot Defined0.001770.00CVE-2015-2965
01/13/20156.36.0osCommerce Online Merchant update_zone sql injectionE-Commerce Management SoftwareProof-of-ConceptOfficial Fix0.003440.00CVE-2014-10033
09/19/20125.35.1osCommerce Online MerchantE-Commerce Management SoftwareNot DefinedOfficial Fix0.002140.00CVE-2012-2991
05/27/20124.34.1osCommerce Online Merchant cross site scriptingE-Commerce Management SoftwareHighOfficial Fix0.001320.00CVE-2012-2935
05/27/20124.34.3osCommerce Online Merchant Error Message cross site scriptingE-Commerce Management SoftwareNot DefinedNot Defined0.001440.00CVE-2012-1792
02/13/20124.34.1osCommerce Online Merchant cross site scriptingE-Commerce Management SoftwareProof-of-ConceptOfficial Fix0.007670.00CVE-2012-1059
06/12/20099.88.5osCommerce Luottokunta privileges managementE-Commerce Management SoftwareUnprovenOfficial Fix0.004070.00CVE-2009-2039

5 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 5 results.

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!