digishop vulnerabilities and fixes

Recent CVEs affecting digishop, with upgrade or downgrade steps. 3 tracked.

digishop has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2010-12-30. Highest priority: CVE-2005-4614 (score 50/100).

• CVE-2010-4633 HIGH 7.5 DOWNGRADE SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL com
• CVE-2006-5164 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remo
• CVE-2005-4614 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitr

FAQ

How do I fix digishop vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is digishop being exploited right now?

None of the tracked digishop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which digishop CVE should I patch first?

CVE-2005-4614 currently ranks highest (50/100): Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitr.

RSS feed for digishop · ← Back to latest CVEs