Advisories · Technology

osCommerce2.

Every CVE that names osCommerce2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105226 CVE record

CVSS 5.1 Medium

osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
- osCommerce2
- Other injection
- Code injection
Not analysed yet 5 Oct 2026
CVE-2026-105225 CVE record

CVSS 4.8 Medium

osCommerce osCommerce2 Payment payment.php include code injection
- osCommerce2
- Other injection
- Code injection
Not analysed yet 5 Oct 2026