PatchTheCVEshoppingcart vulnerabilities and fixes
Recent CVEs affecting shoppingcart, with upgrade or downgrade steps. 3 tracked.
shoppingcart has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-16. Highest priority: CVE-2005-1593 (score 52/100).
- CVE-2005-1595 MEDIUM 5.0 DOWNGRADE CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sens
- CVE-2005-1594 HIGH 7.5 DOWNGRADE SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute
- CVE-2005-1593 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attacker
FAQ
How do I fix shoppingcart vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shoppingcart being exploited right now?
None of the tracked shoppingcart CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shoppingcart CVE should I patch first?
CVE-2005-1593 currently ranks highest (52/100): Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attacker.