CVE-2014-10033

概要

参考情報

• osvdb.org/show/osvdb/103365
• exploit-db.com/exploits/31515 · Exploit
• secgeek.net/oscommerce-v2x-sql-injection-vulnerability · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/91113
• gburton/oscommerce2 commit e4d90ec

online merchant のその他の脆弱性

• CVE-2018-18966中 4.9osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans t…
• CVE-2018-18965中 4.9osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans t…
• CVE-2018-18964中 4.9osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans t…
• CVE-2012-2991中 5.0The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set …
• CVE-2012-2935中 4.3Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Checkout/pages/main.php in OSCommerce Online Merchant 3…