CVE-2012-0312
26.01.2012, 15:55
Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| oscommerce | online_merchant | 𝑥 ≤ 2.3.0 |
| oscommerce | online_merchant | 2.2 |
| oscommerce | oscommerce | 2.2ms1j-r1:ms1j |
| oscommerce | oscommerce | 2.2ms1j-r2:ms1j |
| oscommerce | oscommerce | 2.2ms1j-r3:ms1j |
| oscommerce | oscommerce | 2.2ms1j-r4:ms1j |
| oscommerce | oscommerce | 2.2ms1j-r5:ms1j |
| oscommerce | oscommerce | 2.2ms1j-r6a:ms1j |
| oscommerce | oscommerce | 2.2ms1j-r7:ms1j |
| oscommerce | oscommerce | 2.2ms1j-r8:ms1j |
𝑥
= Vulnerable software versions