PatchTheCVEvirtuastore vulnerabilities and fixes
Recent CVEs affecting virtuastore, with upgrade or downgrade steps. 3 tracked.
virtuastore has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-07-10. Highest priority: CVE-2006-3402 (score 48/100).
- CVE-2006-3488 MEDIUM 5.0 DOWNGRADE Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possi
- CVE-2006-3487 MEDIUM 5.0 DOWNGRADE VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remot
- CVE-2006-3402 HIGH 7.5 DOWNGRADE SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via t
FAQ
How do I fix virtuastore vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is virtuastore being exploited right now?
None of the tracked virtuastore CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which virtuastore CVE should I patch first?
CVE-2006-3402 currently ranks highest (48/100): SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via t.