What’s Vulnerable › Products

osCommerce2 vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your osCommerce2 version is affected

Latest osCommerce2 vulnerabilities

• CVE-2026-105226 — osCommerce osCommerce2 Newsletter Management newsletters.php include code injection (CVSS 4.7)
• CVE-2026-105225 — osCommerce osCommerce2 Payment payment.php include code injection (CVSS 4.3)