comersus open technologies vulnerabilities

Recent CVEs affecting comersus open technologies products. 14 tracked.

comersus open technologies has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-06-21. Highest priority: CVE-2004-0682 (score 55/100).

CVE-2007-3324 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arb
CVE-2007-3323 HIGH 7.5 DOWNGRADE SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attacke
CVE-2005-3397 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary we
CVE-2005-3285 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus
CVE-2005-2191 MEDIUM 4.3 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject
CVE-2005-2190 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary S
CVE-2005-1188 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote att
CVE-2005-1010 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web sc
CVE-2005-0303 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backoffic
CVE-2005-0302 HIGH 7.5 DOWNGRADE SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute
CVE-2005-0301 HIGH 7.5 DOWNGRADE comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentica
CVE-2004-1656 MEDIUM 5.0 DOWNGRADE CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response
CVE-2004-0682 HIGH 7.5 DOWNGRADE comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote atta
CVE-2004-0681 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus

FAQ

How do I fix comersus open technologies vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is comersus open technologies being exploited right now?

None of the tracked comersus open technologies CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which comersus open technologies CVE should I patch first?

CVE-2004-0682 currently ranks highest (55/100): comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote atta.

Products

RSS feed for comersus open technologies · ← Back to latest CVEs