An update to the osCommerce 2.2 Milestone 2 version has been released that addresses security related issues and bug reports that exist in the released version.

Read more / Get it here.

Thanks for the info Thomas

Thanks Thomas. I am sure it will help many of us out.

Hello everyone,

Many of you that run osCommerce should take this upgrade seriously. We have seen many sites get exploited especially with the email injections that have hit many of the users insecure mailing scripts.

Please remember it is your responsibilty to maintain the security of your scripts and to update them when security patches have been released. This protects both your site as well as the community.