osCommerce osCommerce 2.2 release candidate 2a
Approved changes feed: RSS · Atom
cpe:2.3:a:oscommerce:oscommerce:2.2:rc_2a:*:*:*:*:*:*
part: a version: 2.2 update: rc_2a
| Vendor | Oscommerce (098fcb3a-981f-5eec-92bc-f7a3c45bbae2) |
|---|---|
| Product | Oscommerce (f05e8607-2cd4-5ed2-8937-7df3644c7cce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/oscommerce/oscommerce |
purl2cpe | 2026-06-01 10:12:48.795736 |
pkg:github/oscommerce/oscommerce2 |
purl2cpe | 2026-06-01 10:12:48.795737 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-0408 |
vulnerable | 2026-06-08 04:51:09.271060 |
Details available
Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators.
Published: 2009-02-03T19:00:00.000Z
Updated: 2024-08-07T04:31:26.321Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4170 |
vulnerable | 2026-06-08 04:50:38.026321 |
Details available
create_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message.
Published: 2008-09-22T18:00:00.000Z
Updated: 2024-08-07T10:08:34.938Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.