Oscommerce

Oscommerce

82 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2023-6296

  • EPSS 0.81%
  • Veröffentlicht 26.11.2023 22:15:06
  • Zuletzt bearbeitet 21.11.2024 08:43:33

A vulnerability was found in osCommerce 4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /catalog/compare of the component Instant Message Handler. The manipulation of the argument compare with the...

5.4

CVE-2023-5112

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.09.2023 23:15:40
  • Zuletzt bearbeitet 21.11.2024 08:41:05

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "specials_type_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user...

5.4

CVE-2023-5111

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.09.2023 23:15:40
  • Zuletzt bearbeitet 21.11.2024 08:41:04

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "featured_type_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user...

5.4

CVE-2023-43735

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.09.2023 23:15:40
  • Zuletzt bearbeitet 21.11.2024 08:24:41

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "formats_titles[7]" parameter, potentially leading to unauthorized execution of scripts within a user's w...

5.4

CVE-2023-43734

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.09.2023 23:15:40
  • Zuletzt bearbeitet 21.11.2024 08:24:41

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

5.4

CVE-2023-43733

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.09.2023 23:15:40
  • Zuletzt bearbeitet 21.11.2024 08:24:41

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "company_address" parameter, potentially leading to unauthorized execution of scripts within a user's web...

5.4

CVE-2023-43732

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.09.2023 23:15:40
  • Zuletzt bearbeitet 21.11.2024 08:24:41

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_title" parameter, potentially leading to unauthorized execution of scripts within a user's web...

5.4

CVE-2023-43729

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.09.2023 22:15:11
  • Zuletzt bearbeitet 21.11.2024 08:24:40

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "xsell_type_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's ...

5.4

CVE-2023-43728

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.09.2023 22:15:11
  • Zuletzt bearbeitet 21.11.2024 08:24:40

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_delivery_terms_text[1]" parameter, potentially leading to unauthorized execution of scripts within...

5.4

CVE-2023-43730

Exploit
  • EPSS 0.43%
  • Veröffentlicht 30.09.2023 22:15:11
  • Zuletzt bearbeitet 21.11.2024 08:24:40

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "countries_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's w...