Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110373. PoCs published by smash.
AI-analyzed exploit summary This exploit demonstrates multiple XSS vulnerabilities in osCommerce 2.3.4, including reflected and persistent XSS via CSRF. It provides detailed PoC code for exploiting these vulnerabilities in various admin panels.
Description
osCommerce 2.3.4 - Multiple Vulnerabilities
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by smash · textwebappsphp
https://www.exploit-db.com/exploits/34582
This exploit demonstrates multiple XSS vulnerabilities in osCommerce 2.3.4, including reflected and persistent XSS via CSRF. It provides detailed PoC code for exploiting these vulnerabilities in various admin panels.
Classification
Working Poc 100%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
osCommerce 2.3.4
Auth required
Prerequisites:
Access to admin panel · Victim interaction for CSRF
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026