PatchTheCVEjshop e-commerce vulnerabilities
Recent CVEs affecting jshop e-commerce products. 3 tracked.
jshop e-commerce has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-01-13. Highest priority: CVE-2007-0232 (score 53/100).
- CVE-2007-0232 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote atta
- CVE-2004-2084 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to i
- CVE-2004-1738 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web
FAQ
How do I fix jshop e-commerce vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jshop e-commerce being exploited right now?
None of the tracked jshop e-commerce CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jshop e-commerce CVE should I patch first?
CVE-2007-0232 currently ranks highest (53/100): PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote atta.