CVE-2023-6609

A vulnerability was found in osCommerce 4. It has been classified as problematic. This affects an unknown part of the file /b2b-supermarket/catalog/all-products. The manipulation of the argument keywords with the input %27%22%3E%3Cimg%2Fsrc%3D1+onerror%3Dalert%28document.cookie%29%3E leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247245 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79
• CWE-79

• https://vuldb.com/?ctiid.247245Third Party Advisory
• https://vuldb.com/?id.247245Third Party Advisory
• https://vuldb.com/?ctiid.247245Third Party Advisory
• https://vuldb.com/?id.247245Third Party Advisory

Published

Dec 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6603A flaw was found in FFmpeg's HLS playlist parsing. This vuln…7.5
• CVE-2023-6604A flaw was found in FFmpeg. This vulnerability allows unexpe…5.3
• CVE-2023-6605A flaw was found in FFmpeg's DASH playlist support. This vul…7.2
• CVE-2023-6606An out-of-bounds read vulnerability was found in smbCalcSize…7.1
• CVE-2023-6607A vulnerability has been found in Tongda OA 2017 up to 11.10…7.5
• CVE-2023-6608A vulnerability was found in Tongda OA 2017 up to 11.9 and c…7.5
• CVE-2023-6610An out-of-bounds read vulnerability was found in smb2_dump_d…7.1
• CVE-2023-6611A vulnerability was found in Tongda OA 2017 up to 11.9. It h…7.5
• CVE-2023-6612A vulnerability was found in Totolink X5000R 9.1.0cu.2300_B2…9.8
• CVE-2023-6613A vulnerability classified as problematic has been found in …4.8
• CVE-2023-6614A vulnerability classified as problematic was found in Typec…2.7
• CVE-2023-6615A vulnerability, which was classified as problematic, has be…5.3