Directory Traversal Vulnerability in osCommerce by osCommerce Inc.
CVE-2015-2965

Currently unrated

Key Information:

Vendor: Oscommerce
Status: Oscommerce
Vendor: CVE Published:; 28 June 2015

What is CVE-2015-2965?

A directory traversal vulnerability exists in osCommerce versions up to 2.2ms1j-R8, allowing remote authenticated administrators to access sensitive files on the server. This can occur through unspecified methods that bypass security measures, potentially leading to unauthorized file disclosures. It is essential for users of the affected versions to apply security patches and follow best practices to mitigate the risk associated with this vulnerability.

References

http://www.securityfocus.com/bid/75472

vdb-entryx_refsource_BID

http://www.bitscope.co.jp/tep/news.html

x_refsource_MISC

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000091

third-party-advisoryx_refsource_JVNDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 28, 2015
Vulnerability Reserved
Apr 7, 2015

CVE-2015-2965 Data

JSON

Oscommerce

What is CVE-2015-2965?

References

Timeline