https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:50:16.550655+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318781 EUVD-2026-318781 2026-10-05T20:50:16.552958+00:00 EUVD-2026-318781 https://cve.radiocsirt.org/vuln/fkie_cve-2009-20006 fkie_cve-2009-20006 2026-10-05T20:50:16.552991+00:00

osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated attacker can craft a POST request to upload a .php file containing arbitrary code, which is then executed by the server.

 https://cve.radiocsirt.org/vuln/ghsa-2h4r-77vh-7qcf GHSA-2h4r-77vh-7qcf 2026-10-05T20:50:16.553022+00:00

osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated attacker can craft a POST request to upload a .php file containing arbitrary code, which is then executed by the server.