PatchTheCVEboxcar media vulnerabilities
Recent CVEs affecting boxcar media products. 2 tracked.
boxcar media has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-07-13. Highest priority: CVE-2006-3542 (score 38/100).
- CVE-2006-3542 MEDIUM 5.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers
- CVE-2006-0111 MEDIUM 5.0 MITIGATE Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to injec
FAQ
How do I fix boxcar media vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is boxcar media being exploited right now?
None of the tracked boxcar media CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which boxcar media CVE should I patch first?
CVE-2006-3542 currently ranks highest (38/100): Multiple cross-site scripting (XSS) vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers.