EIP-2026-104641

This is a writeup describing a DoS vulnerability in osCommerce where passing a large amount of random content as a URI parameter to product_info.php causes instability in the MySQL and web server. The vulnerability is reported to affect osCommerce version 2.2cvs and potentially earlier versions.