PatchTheCVEvp-asp shopping cart vulnerabilities and fixes
Recent CVEs affecting vp-asp shopping cart, with upgrade or downgrade steps. 5 tracked.
Also searched as: vp asp shopping cart, vp-aspshoppingcart.
vp-asp shopping cart has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2010-04-28. Highest priority: CVE-2010-1588 (score 48/100).
- CVE-2010-1590 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart
- CVE-2010-1589 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 a
- CVE-2010-1588 HIGH 7.5 UPGRADE SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP
- CVE-2008-5929 MEDIUM 5.0 DOWNGRADE VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, wh
- CVE-2007-2790 MEDIUM 6.8 UPGRADE Cross-site scripting (XSS) vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier
FAQ
How do I fix vp-asp shopping cart vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vp-asp shopping cart being exploited right now?
None of the tracked vp-asp shopping cart CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vp-asp shopping cart CVE should I patch first?
CVE-2010-1588 currently ranks highest (48/100): SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP.