Description
oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/password_reset.php
Remediation
References
Related Vulnerabilities
Joomla! Core 1.5.x Cross-Site Scripting (1.5.0 - 1.5.10)
OpenSSL CVE-2018-0733 Vulnerability (CVE-2018-0733)
Artifactory Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-42509)
WordPress Plugin HD Quiz Cross-Site Scripting (1.8.3)
osTicket Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2019-14749)