PatchTheCVEshop vulnerabilities and fixes
Recent CVEs affecting shop, with upgrade or downgrade steps. 3 tracked.
shop has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-10-15. Highest priority: CVE-2006-0532 (score 43/100).
- CVE-2007-5463 MEDIUM 5.0 UPGRADE ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers
- CVE-2006-2979 LOW 2.6 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions
- CVE-2006-0532 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject a
FAQ
How do I fix shop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shop being exploited right now?
None of the tracked shop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shop CVE should I patch first?
CVE-2006-0532 currently ranks highest (43/100): Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject a.