Open Source Adapted Bicycle Pedal Comes to the Rescue
Accessibility has always been important to designers of open source software. Now that open source has come to design, that's more true than ever, as demonstrated with this open source bicycle
Linux Action Show to End Eleven-Year Run at LFNW
Six more episodes before the popular Linux podcast, Linux Action Show, ends its nearly 11-year run in a live broadcast from LinuxFest Northwest.


Jupiter Broadcasting's long-running
Dealing With Real-Life, Everyday Security Threats
No one has ever been shot by a hacker who was breaking into their computer through the Internet. Not so for thieves coming in through the back door.

Roblimo's Hideaway

I wrote a piece
Four Things a New Linux User Should Know
When you move from "that other operating system" to Linux, you're going to find that in most ways you'll be in familiar territory. However, that's not always the case. We sometimes do things a little differently
The Future of Desktop Ubuntu
With all the changes happening at Canonical, you might wonder what this means for the future of desktop Ubuntu, besides the return to the GNOME desktop.

There hasn't been this much news about a single Linux distro
Libreboot Reorganizes: Seeks to Make Amends
It appears the people developing Libreboot have done some of the hard work necessary to fix potentially toxic personal dynamics after last year's controversy, when the project removed itself from the
It's Windows Time in Linux Land Again
Using Windows. What a horrible thing to ask a Linux user to do.
August 1st, 2011

osCommerce Under Attack – So Far 3.79 Million Pages Affected

The popular osCommerce ecommerce application has been under attack at least since last week, according to web application security firm Amorize. At last count the attack has affected more than three million pages. The attack, in the form of an iFrame injection, utilizes several vulnerabilities in older versions of osCommerce. The latest version doesn’t seem to be affected. Any business using an older version of osCommerce is advised to upgrade immediately.

The Zen Cart ecommerce application, which was initially a value added fork of osCommerce, doesn’t seem to be affected. Kim Elliott, one of the founding members of Zen Cart, told me, “As far as I know there hasn’t been a problem. As long as you have our latest version and file permissions set correctly you shouldn’t have any issues.”

Help Net Security reports that a hacked osCommerce site will redirect that site’s visitors to various “drive-by” sites:

“The injected iFrames point to the and domains and through a series of redirections and JavaScript loadings of additional iFrames takes the user to a page on the domain where a number of exploits try to take advantage of a handful of vulnerabilities in the user’s browser.”

Unfortunately, the attack is difficult to detect using most AV solutions and will require web site admins to do a little digging. Again according to Help Net Security:

“In order to check if their website(s) have been affected by the attack, Armorize advises owners/administrators to check their logs for access from the following IPs:,,, (located in Ukraine), and to check the web pages’ source code for the offending iFrames.

“If the result of this search is positive, they should install an AV solution on the computer through which they manage the website(s), remove all the injected backdoors/iFrames/JavaScript, upgrade the osCommerce installation and, in the end, change their website hosting and osCommerce admin passwords.”

Of course, keeping your installation patched and up-to-date is crucial for web site security, as the black hats are always searching for new exploits. As Kim Elliot with Zen Cart (again, not affected by this exploit) told me, “Security is a very movable feast. As soon as you lock one door, they’ll find another.”

The following two tabs change content below.
Christine Hall has been a journalist since 1971. In 2001, she began writing a weekly consumer computer column and started covering Linux and FOSS in 2002 after making the switch to GNU/Linux. Follow her on Twitter: @BrideOfLinux

Latest posts by Christine Hall (see all)

3 comments to osCommerce Under Attack – So Far 3.79 Million Pages Affected