https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-1595.htmlhttps://patchthecve.com/cve/CVE-2005-1595.htmlTue, 16 Jun 2026 22:13:20 +0000MEDIUM 5.0: CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request.https://patchthecve.com/cve/CVE-2005-1594.htmlhttps://patchthecve.com/cve/CVE-2005-1594.htmlTue, 16 Jun 2026 22:13:20 +0000HIGH 7.5: SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.https://patchthecve.com/cve/CVE-2005-1593.htmlhttps://patchthecve.com/cve/CVE-2005-1593.htmlTue, 16 Jun 2026 22:13:20 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.