https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:27:33.202902+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-25495 CVE-2019-25495 — osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter 2026-10-06T06:27:33.238682+00:00

Affected: osCommerce

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviews_id parameter. Attackers can send GET requests to product_reviews_write.php with malicious reviews_id values using boolean-based SQL injection payloads to extract sensitive database information.