osCommerce versions 2.2-MS2 and below suffer from an HTTP response splitting vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38148/oscommerce22.txt
Source: https://packetstormsecurity.com/files/38148/oscommerce22.txt.html