PatchTheCVEcomersus cart vulnerabilities and fixes
Recent CVEs affecting comersus cart, with upgrade or downgrade steps. 9 tracked.
Also searched as: comersuscart.
comersus cart has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-06-21. Highest priority: CVE-2004-0682 (score 55/100).
- CVE-2007-3324 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arb
- CVE-2007-3323 HIGH 7.5 DOWNGRADE SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attacke
- CVE-2005-2191 MEDIUM 4.3 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject
- CVE-2005-2190 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary S
- CVE-2005-1188 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote att
- CVE-2005-1010 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web sc
- CVE-2004-1656 MEDIUM 5.0 DOWNGRADE CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response
- CVE-2004-0682 HIGH 7.5 DOWNGRADE comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote atta
- CVE-2004-0681 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus
FAQ
How do I fix comersus cart vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is comersus cart being exploited right now?
None of the tracked comersus cart CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which comersus cart CVE should I patch first?
CVE-2004-0682 currently ranks highest (55/100): comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote atta.