Known vulnerabilities in oscommerce2

Vendor: osCommerce
Software: oscommerce2
Software CPE: cpe:2.3:a:oscommerce:online_merchant:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting oscommerce2 oscommerce2 is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU36456 - Improper input validation
CVE-2018-18964		 CWE-20 Medium
No
No
 - 06.11.2018 SB2018110623
#VU36457 - Improper input validation
CVE-2018-18965		 CWE-20 Medium
No
No
 - 06.11.2018 SB2018110623
#VU44025 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-1792		 CWE-79 Low
No
No
 - 27.05.2012 SB2012052702
#VU44026 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2935		 CWE-79 Low
No
No
 - 27.05.2012 SB2012052702
#VU44299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-1059		 CWE-79 Low
Available
No
 - 14.02.2012 SB2012021405