CVE-2015-2965: Oscommerce

Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in osCommerce Japanese 2.2ms1j-R8 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors.

Affected products

• Oscommerce Oscommerce: up to and including 2.2ms1j-r8

Published 2015-06-28. Last modified 2026-06-17.