https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-3324.htmlhttps://patchthecve.com/cve/CVE-2007-3324.htmlTue, 16 Jun 2026 22:41:46 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter to (1) comersus_customerAuthenticateForm.asp or (2) comersus_message.asp, different vectors than CVE-2004-0681.https://patchthecve.com/cve/CVE-2007-3323.htmlhttps://patchthecve.com/cve/CVE-2007-3323.htmlTue, 16 Jun 2026 22:41:45 +0000HIGH 7.5: SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idProduct parameter. NOTE: this might be the same as CVE-2005-2190.2.https://patchthecve.com/cve/CVE-2005-2191.htmlhttps://patchthecve.com/cve/CVE-2005-2191.htmlTue, 16 Jun 2026 22:14:26 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to comersus_backoffice_listAssignedPricesToCustomer.asp or (2) message parameter to comersus_backoffice_message.asp.https://patchthecve.com/cve/CVE-2005-2190.htmlhttps://patchthecve.com/cve/CVE-2005-2190.htmlTue, 16 Jun 2026 22:14:26 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to comersus_optAffiliateRegistrationExec.asp or (2) idProduct parameter to comersus_optReviewReadExec.asp.https://patchthecve.com/cve/CVE-2005-1188.htmlhttps://patchthecve.com/cve/CVE-2005-1188.htmlTue, 16 Jun 2026 22:12:36 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.https://patchthecve.com/cve/CVE-2005-1010.htmlhttps://patchthecve.com/cve/CVE-2005-1010.htmlTue, 16 Jun 2026 22:12:16 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.https://patchthecve.com/cve/CVE-2004-1656.htmlhttps://patchthecve.com/cve/CVE-2004-1656.htmlTue, 16 Jun 2026 22:08:09 +0000MEDIUM 5.0: CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.https://patchthecve.com/cve/CVE-2004-0682.htmlhttps://patchthecve.com/cve/CVE-2004-0682.htmlTue, 16 Jun 2026 22:06:09 +0000HIGH 7.5: comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.https://patchthecve.com/cve/CVE-2004-0681.htmlhttps://patchthecve.com/cve/CVE-2004-0681.htmlTue, 16 Jun 2026 22:06:09 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message paramete