PatchTheCVEig shop vulnerabilities and fixes
Recent CVEs affecting ig shop, with upgrade or downgrade steps. 6 tracked.
Also searched as: igshop.
ig shop has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-05-16. Highest priority: CVE-2007-0134 (score 55/100).
- CVE-2007-2717 HIGH 7.5 DOWNGRADE SQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbi
- CVE-2007-0134 HIGH 7.5 DOWNGRADE Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary co
- CVE-2007-0133 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote
- CVE-2007-0132 HIGH 7.5 DOWNGRADE SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute
- CVE-2006-5632 MEDIUM 6.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject a
- CVE-2006-5631 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject a
FAQ
How do I fix ig shop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ig shop being exploited right now?
None of the tracked ig shop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ig shop CVE should I patch first?
CVE-2007-0134 currently ranks highest (55/100): Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary co.