https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:25:17.087472+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280762 EUVD-2026-280762 2026-10-06T12:25:17.144254+00:00 EUVD-2026-280762 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25496 fkie_cve-2019-25496 2026-10-06T12:25:17.144293+00:00

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id parameter. Attackers can modify the products_id value in product_info.php requests and append boolean-based SQL injection payloads to extract sensitive database information.

 https://cve.radiocsirt.org/vuln/ghsa-659v-qhqp-595j GHSA-659v-qhqp-595j 2026-10-06T12:25:17.144327+00:00

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id parameter. Attackers can modify the products_id value in product_info.php requests and append boolean-based SQL injection payloads to extract sensitive database information.