PatchTheCVEjshop server vulnerabilities and fixes
Recent CVEs affecting jshop server, with upgrade or downgrade steps. 4 tracked.
Also searched as: jshopserver.
jshop server has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-04-02. Highest priority: CVE-2008-1624 (score 53/100).
- CVE-2008-1624 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers t
- CVE-2007-0232 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote atta
- CVE-2004-2084 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to i
- CVE-2004-1738 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web
FAQ
How do I fix jshop server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jshop server being exploited right now?
None of the tracked jshop server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jshop server CVE should I patch first?
CVE-2008-1624 currently ranks highest (53/100): Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers t.