Show filters
75 Total Results
Displaying 71-75 of 75
Sort by:
Attacker Value
Unknown
CVE-2004-2638
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the in_login parameter to a non-zero value.
0
Attacker Value
Unknown
CVE-2004-2021
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. (dot dot) in the filename argument.
0
Attacker Value
Unknown
CVE-2003-1219
Disclosure Date: December 31, 2003 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.
0
Attacker Value
Unknown
CVE-2002-1991
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php.
0
Attacker Value
Unknown
CVE-2002-2019
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote attackers to execute arbitrary PHP code via the include_file parameter.
0
