Is That a Virus in Your Shopping Cart?
Summary: Armorize detected more than six million web pages seeded with attack kits that exploit browser plug-in flaws, including two in Java, two Windows bugs, and a weakness in Adobe's PDF Reader, on sites running outdated versions of the osCommerce shopping cart program. The malware leverages three named osCommerce vulnerabilities disclosed between May 2010 and July 2011, and patches are available for all the targeted browser flaws.
What you should know: Six million booby-trapped pages sat on e-commerce sites handling credit and debit card transactions, and the exploited osCommerce flaws had public disclosures dating back to May 2010 - meaning the exposure persisted long after fixes were available.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026