Critical severity9.8NVD Advisory· Published Jan 27, 2021· Updated Jun 17, 2026
CVE-2020-23360
CVE-2020-23360
Description
oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/password_reset.php
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:oscommerce:oscommerce:2.3.4.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oscommerce:oscommerce:2.3.4.1:*:*:*:*:*:*:*
- (no CPE)range: = 2.3.4.1
- oscommerce/oscommercedescription
Patches
Vulnerability mechanics
References
1- github.com/osCommerce/oscommerce2/issues/658nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.