CVE-2012-0312
26.01.2012, 15:55
Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Cross-site Scripting
| Vendor | Product | Version |
|---|---|---|
| oscommerce | online_merchant | 𝑥 ≤ 2.3.0 |
| oscommerce | online_merchant | 2.2 |
| oscommerce | oscommerce | 2.2ms1j-r1 |
| oscommerce | oscommerce | 2.2ms1j-r2 |
| oscommerce | oscommerce | 2.2ms1j-r3 |
| oscommerce | oscommerce | 2.2ms1j-r4 |
| oscommerce | oscommerce | 2.2ms1j-r5 |
| oscommerce | oscommerce | 2.2ms1j-r6a |
| oscommerce | oscommerce | 2.2ms1j-r7 |
| oscommerce | oscommerce | 2.2ms1j-r8 |
𝑥
= Vulnerable software versions