Vulnerability Database

296,854

Total vulnerabilities in the database

CVE-2012-0312

Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • Published: Jan 26, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-0312
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
oscommerce / online_merchant 2.2 2.2.x
oscommerce / online_merchant - 2.3.0.x
oscommerce / oscommerce 2.2ms1j-r2 2.2ms1j-r2.x
oscommerce / oscommerce 2.2ms1j-r5 2.2ms1j-r5.x
oscommerce / oscommerce 2.2ms1j-r6a 2.2ms1j-r6a.x
oscommerce / oscommerce 2.2ms1j-r3 2.2ms1j-r3.x
oscommerce / oscommerce 2.2ms1j-r7 2.2ms1j-r7.x
oscommerce / oscommerce 2.2ms1j-r8 2.2ms1j-r8.x
oscommerce / oscommerce 2.2ms1j-r1 2.2ms1j-r1.x
oscommerce / oscommerce 2.2ms1j-r4 2.2ms1j-r4.x