CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-25497

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shopping_cart.php with malicious currency values using boolean-based SQL injection payloads to extract sensitive database information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.1%

CVSS Severity

CVSS v3 Score 8.2

References

Products affected by CVE-2019-25497

Oscommerce » Oscommerce » Version: N/A

cpe:2.3:a:oscommerce:oscommerce:-
Oscommerce » Oscommerce » Version: 1.0.0.0

cpe:2.3:a:oscommerce:oscommerce:1.0.0.0
Oscommerce » Oscommerce » Version: 1.0.1.0

cpe:2.3:a:oscommerce:oscommerce:1.0.1.0
Oscommerce » Oscommerce » Version: 1.0.2.0

cpe:2.3:a:oscommerce:oscommerce:1.0.2.0
Oscommerce » Oscommerce » Version: 1.0.3.0

cpe:2.3:a:oscommerce:oscommerce:1.0.3.0
Oscommerce » Oscommerce » Version: 1.0.4.0

cpe:2.3:a:oscommerce:oscommerce:1.0.4.0
Oscommerce » Oscommerce » Version: 1.0.5.0

cpe:2.3:a:oscommerce:oscommerce:1.0.5.0
Oscommerce » Oscommerce » Version: 1.0.6.0

cpe:2.3:a:oscommerce:oscommerce:1.0.6.0
Oscommerce » Oscommerce » Version: 1.0.7.0

cpe:2.3:a:oscommerce:oscommerce:1.0.7.0
Oscommerce » Oscommerce » Version: 1.0.7.1

cpe:2.3:a:oscommerce:oscommerce:1.0.7.1
Oscommerce » Oscommerce » Version: 1.0.7.2

cpe:2.3:a:oscommerce:oscommerce:1.0.7.2
Oscommerce » Oscommerce » Version: 1.0.7.3

cpe:2.3:a:oscommerce:oscommerce:1.0.7.3
Oscommerce » Oscommerce » Version: 1.0.7.4

cpe:2.3:a:oscommerce:oscommerce:1.0.7.4
Oscommerce » Oscommerce » Version: 1.0.7.5

cpe:2.3:a:oscommerce:oscommerce:1.0.7.5
Oscommerce » Oscommerce » Version: 1.0.7.6

cpe:2.3:a:oscommerce:oscommerce:1.0.7.6
Oscommerce » Oscommerce » Version: 1.0.7.7

cpe:2.3:a:oscommerce:oscommerce:1.0.7.7
Oscommerce » Oscommerce » Version: 1.0.7.8

cpe:2.3:a:oscommerce:oscommerce:1.0.7.8
Oscommerce » Oscommerce » Version: 1.0.7.9

cpe:2.3:a:oscommerce:oscommerce:1.0.7.9
Oscommerce » Oscommerce » Version: 1.1

cpe:2.3:a:oscommerce:oscommerce:1.1
Oscommerce » Oscommerce » Version: 1.11

cpe:2.3:a:oscommerce:oscommerce:1.11
Oscommerce » Oscommerce » Version: 1.12

cpe:2.3:a:oscommerce:oscommerce:1.12
Oscommerce » Oscommerce » Version: 1.13

cpe:2.3:a:oscommerce:oscommerce:1.13
Oscommerce » Oscommerce » Version: 1.5.1

cpe:2.3:a:oscommerce:oscommerce:1.5.1
Oscommerce » Oscommerce » Version: 2.1

cpe:2.3:a:oscommerce:oscommerce:2.1
Oscommerce » Oscommerce » Version: 2.2

cpe:2.3:a:oscommerce:oscommerce:2.2
Oscommerce » Oscommerce » Version: 2.2_cvs

cpe:2.3:a:oscommerce:oscommerce:2.2_cvs
Oscommerce » Oscommerce » Version: 2.2_ms1

cpe:2.3:a:oscommerce:oscommerce:2.2_ms1
Oscommerce » Oscommerce » Version: 2.2_ms2

cpe:2.3:a:oscommerce:oscommerce:2.2_ms2
Oscommerce » Oscommerce » Version: 2.2_ms2_2006-08-17

cpe:2.3:a:oscommerce:oscommerce:2.2_ms2_2006-08-17
Oscommerce » Oscommerce » Version: 2.2_ms3

cpe:2.3:a:oscommerce:oscommerce:2.2_ms3
Oscommerce » Oscommerce » Version: 2.2ms1j-r1

cpe:2.3:a:oscommerce:oscommerce:2.2ms1j-r1
Oscommerce » Oscommerce » Version: 2.2ms1j-r2

cpe:2.3:a:oscommerce:oscommerce:2.2ms1j-r2
Oscommerce » Oscommerce » Version: 2.2ms1j-r3

cpe:2.3:a:oscommerce:oscommerce:2.2ms1j-r3
Oscommerce » Oscommerce » Version: 2.2ms1j-r4

cpe:2.3:a:oscommerce:oscommerce:2.2ms1j-r4
Oscommerce » Oscommerce » Version: 2.2ms1j-r5

cpe:2.3:a:oscommerce:oscommerce:2.2ms1j-r5
Oscommerce » Oscommerce » Version: 2.2ms1j-r6a

cpe:2.3:a:oscommerce:oscommerce:2.2ms1j-r6a
Oscommerce » Oscommerce » Version: 2.2ms1j-r7

cpe:2.3:a:oscommerce:oscommerce:2.2ms1j-r7
Oscommerce » Oscommerce » Version: 2.2ms1j-r8

cpe:2.3:a:oscommerce:oscommerce:2.2ms1j-r8
Oscommerce » Oscommerce » Version: 2.2ms1j-r9

cpe:2.3:a:oscommerce:oscommerce:2.2ms1j-r9
Oscommerce » Oscommerce » Version: 2.3

cpe:2.3:a:oscommerce:oscommerce:2.3
Oscommerce » Oscommerce » Version: 2.3.1

cpe:2.3:a:oscommerce:oscommerce:2.3.1
Oscommerce » Oscommerce » Version: 2.3.2

cpe:2.3:a:oscommerce:oscommerce:2.3.2
Oscommerce » Oscommerce » Version: 2.3.3

cpe:2.3:a:oscommerce:oscommerce:2.3.3
Oscommerce » Oscommerce » Version: 2.3.3.1

cpe:2.3:a:oscommerce:oscommerce:2.3.3.1
Oscommerce » Oscommerce » Version: 2.3.3.2

cpe:2.3:a:oscommerce:oscommerce:2.3.3.2
Oscommerce » Oscommerce » Version: 2.3.3.3

cpe:2.3:a:oscommerce:oscommerce:2.3.3.3
Oscommerce » Oscommerce » Version: 2.3.3.4

cpe:2.3:a:oscommerce:oscommerce:2.3.3.4
Oscommerce » Oscommerce » Version: 2.3.4

cpe:2.3:a:oscommerce:oscommerce:2.3.4
Oscommerce » Oscommerce » Version: 2.3.4.1

cpe:2.3:a:oscommerce:oscommerce:2.3.4.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-25497

Products

Pricing

Contact Us