https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-0351.htmlhttps://patchthecve.com/cve/CVE-2004-0351.htmlTue, 16 Jun 2026 22:05:26 +0000LOW 2.1: Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data.https://patchthecve.com/cve/CVE-2004-0350.htmlhttps://patchthecve.com/cve/CVE-2004-0350.htmlTue, 16 Jun 2026 22:05:26 +0000LOW 2.1: SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring.https://patchthecve.com/cve/CVE-2004-0348.htmlhttps://patchthecve.com/cve/CVE-2004-0348.htmlTue, 16 Jun 2026 22:05:26 +0000HIGH 10.0: SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter.