<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: oscommerce</title><description>Every new CVE for oscommerce.</description><link>https://agentprime.io/</link><item><title>CVE-2026-18592: osCommerce Email Template Configuration EmailController.php EmailController sql injection</title><link>https://agentprime.io/advisories/CVE-2026-18592/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18592/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Aug 2026 07:30:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-25497: osCommerce 2.3.4.1 SQL Injection via currency Parameter</title><link>https://agentprime.io/advisories/CVE-2019-25497/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-25497/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 17:23:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-25496: osCommerce 2.3.4.1 SQL Injection via products_id Parameter</title><link>https://agentprime.io/advisories/CVE-2019-25496/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-25496/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 17:23:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-25495: osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter</title><link>https://agentprime.io/advisories/CVE-2019-25495/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-25495/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 17:23:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2009-20006: osCommerce &lt;= 2.2 Admin File Manager Arbitrary PHP Code Execution</title><link>https://agentprime.io/advisories/CVE-2009-20006/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2009-20006/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Sep 2025 14:33:40 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40674: Reflected Cross-Site Scripting (XSS) in osCommerce</title><link>https://agentprime.io/advisories/CVE-2025-40674/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40674/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Jun 2025 08:50:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-4348: osCommerce all-products cross site scripting</title><link>https://agentprime.io/advisories/CVE-2024-4348/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4348/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 30 Apr 2024 22:00:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6609: osCommerce all-products cross site scripting</title><link>https://agentprime.io/advisories/CVE-2023-6609/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6609/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Dec 2023 14:31:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6579: osCommerce POST Parameter shopping-cart sql injection</title><link>https://agentprime.io/advisories/CVE-2023-6579/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6579/</guid><description>CVSS 7.3 (High). Critical: CVSS score 7.3 (7.0 or more) and EPSS 0.24 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 07 Dec 2023 21:31:04 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-6296: osCommerce Instant Message compare cross site scripting</title><link>https://agentprime.io/advisories/CVE-2023-6296/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6296/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 26 Nov 2023 21:31:04 GMT</pubDate><category>CVE</category></item></channel></rss>