https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6875.htmlhttps://patchthecve.com/cve/CVE-2008-6875.htmlTue, 16 Jun 2026 23:03:08 +0000HIGH 7.5: SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-5220.https://patchthecve.com/cve/CVE-2009-1322.htmlhttps://patchthecve.com/cve/CVE-2009-1322.htmlTue, 16 Jun 2026 23:07:01 +0000MEDIUM 5.0: ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb.https://patchthecve.com/cve/CVE-2009-1321.htmlhttps://patchthecve.com/cve/CVE-2009-1321.htmlTue, 16 Jun 2026 23:07:01 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.