Vulnerabilities > Oscommerce > Oscommerce > 1.0.4.0

DATE CVE VULNERABILITY TITLE RISK
2020-10-28 CVE-2020-27976 OS Command Injection vulnerability in Oscommerce
osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely.
network
low complexity
oscommerce CWE-78
critical
 10.0
10
2020-10-28 CVE-2020-27975 Cross-Site Request Forgery (CSRF) vulnerability in Oscommerce
osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF. 		6.8
6.8