PatchTheCVEasp product catalog vulnerabilities and fixes
Recent CVEs affecting asp product catalog, with upgrade or downgrade steps. 3 tracked.
Also searched as: aspproductcatalog.
asp product catalog has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-07-24. Highest priority: CVE-2008-6875 (score 48/100).
- CVE-2009-1322 MEDIUM 5.0 DOWNGRADE ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, whic
- CVE-2009-1321 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to i
- CVE-2008-6875 HIGH 7.5 DOWNGRADE SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary
FAQ
How do I fix asp product catalog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is asp product catalog being exploited right now?
None of the tracked asp product catalog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which asp product catalog CVE should I patch first?
CVE-2008-6875 currently ranks highest (48/100): SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary.