PatchTheCVEcodethat vulnerabilities
Recent CVEs affecting codethat products. 3 tracked.
codethat has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-16. Highest priority: CVE-2005-1593 (score 52/100).
- CVE-2005-1595 MEDIUM 5.0 DOWNGRADE CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sens
- CVE-2005-1594 HIGH 7.5 DOWNGRADE SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute
- CVE-2005-1593 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attacker
FAQ
How do I fix codethat vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is codethat being exploited right now?
None of the tracked codethat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which codethat CVE should I patch first?
CVE-2005-1593 currently ranks highest (52/100): Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attacker.