Issues

osCommerce 2.3.4.1 - Second-Order Remote Code Execution in Storefront Checkout Payment Loading (Stored, Cross-Identity)
osCommerce/oscommerce2#677 · opened on Sep 10, 2026
osCommerce 2.3.4.1 - Remote Code Execution in Newsletter Management (Stored)
osCommerce/oscommerce2#676 · opened on Sep 10, 2026
osCommerce 2.3.4.1 - Remote Code Execution in Configuration Value Editing (Stored)
osCommerce/oscommerce2#675 · opened on Sep 10, 2026
osCommerce 2.3.4.1 - Remote Code Execution in Administration Module Configuration Editing (Stored)
osCommerce/oscommerce2#674 · opened on Sep 10, 2026
SQL injection vulnerability exists in oscommerce2
osCommerce/oscommerce2#672 · opened on Sep 13, 2024
3
Image error
osCommerce/oscommerce2#670 · opened on Nov 3, 2023
How can I solve this problem？
osCommerce/oscommerce2#668 · opened on Mar 2, 2022
1
Professional shops could be knocked out
osCommerce/oscommerce2#667 · opened on Mar 25, 2021
Not in documentation
osCommerce/oscommerce2#666 · opened on Mar 12, 2021
Confused order total process without return array on checkout confirmation page
osCommerce/oscommerce2#665 · opened on Feb 10, 2021
rowCount() is not working anyway
osCommerce/oscommerce2#664 · opened on Jan 26, 2021
Possible annoying multiply posts when browser disconnected in process and server answer lost
osCommerce/oscommerce2#663 · opened on Jun 18, 2020
Not allways set value
osCommerce/oscommerce2#662 · opened on Jun 6, 2020
Status change when download file exist
osCommerce/oscommerce2#661 · opened on Jun 6, 2020
Order total shipping class errors when product are virtuals
osCommerce/oscommerce2#660 · opened on May 31, 2020
File download attributes never deleted
osCommerce/oscommerce2#659 · opened on May 31, 2020
No reason to use longer fields
osCommerce/oscommerce2#657 · opened on Mar 21, 2020
Missing linked file in codebase
osCommerce/oscommerce2#656 · opened on Jan 13, 2020
URL decoded link targeted in rendering so nothing shows in previews
osCommerce/oscommerce2#655 · opened on Jan 9, 2020
Reviews read is obsolate
osCommerce/oscommerce2#654 · opened on Jan 8, 2020
Stat pages dont use absolute rows
osCommerce/oscommerce2#653 · opened on Jan 6, 2020
'password' parameter is not required
osCommerce/oscommerce2#652 · opened on Oct 17, 2019
MySql Strict error
osCommerce/oscommerce2#651 · opened on Aug 22, 2019
Hard coded template dependencies
osCommerce/oscommerce2#650 · opened on Aug 11, 2019
Navbar modules not follow the core logic
osCommerce/oscommerce2#649 · opened on Aug 11, 2019