CVE-2014-10033

Description

References

• osvdb.org/show/osvdb/103365
• exploit-db.com/exploits/31515 · Exploit
• secgeek.net/oscommerce-v2x-sql-injection-vulnerability · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/91113
• gburton/oscommerce2 commit e4d90ec

online merchant 的其他漏洞

• CVE-2018-18966中危 4.9osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans t…
• CVE-2018-18965中危 4.9osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans t…
• CVE-2018-18964中危 4.9osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans t…
• CVE-2012-2991中危 5.0The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set …
• CVE-2012-2935中危 4.3Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Checkout/pages/main.php in OSCommerce Online Merchant 3…