https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T07:37:15.184954+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2009-20006 CVE-2009-20006 — osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution 2026-10-10T07:37:15.201183+00:00

Affected: osCommerce

osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated attacker can craft a POST request to upload a .php file containing arbitrary code, which is then executed by the server.