osCommerce
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| osCommerce2 | 2 | – | Oct 5, 2026 |
| osCommerce | 1 | – | Jun 17, 2025 |
Exploited and recent CVEs
- CVE-2026-105226 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection 0.2%
- CVE-2026-105225 osCommerce osCommerce2 Payment payment.php include code injection 0.2%
- CVE-2025-40674 Reflected Cross-Site Scripting (XSS) in osCommerce 0.5%