Vulnerabilities > Oscommerce > Oscommerce > 3.0a3
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-12-14 | CVE-2006-6534 | Input Validation vulnerability in Oscommerce 3.0A3 Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the (1) set parameter to admin/modules.php, the (2) selected_box parameter to definitiva/admin/customers.php, the (3) lID parameter to admin/languages_definitions.php, or the (4) pID parameter to admin/products.php. network oscommerce | 4.3 |
| 2006-12-14 | CVE-2006-6533 | Input Validation vulnerability in Oscommerce 3.0A3 Directory traversal vulnerability in admin/templates_boxes_layout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. | 7.5 |