PatchTheCVEvaldersoft vulnerabilities
Recent CVEs affecting valdersoft products. 4 tracked.
valdersoft has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-12-21. Highest priority: CVE-2006-0099 (score 54/100).
- CVE-2006-6691 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in Valdersoft Shopping Cart 3.0 and earlier allow remote at
- CVE-2006-0099 HIGH 7.5 DOWNGRADE PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other in
- CVE-2005-0908 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to
- CVE-2005-0907 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbit
FAQ
How do I fix valdersoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is valdersoft being exploited right now?
None of the tracked valdersoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which valdersoft CVE should I patch first?
CVE-2006-0099 currently ranks highest (54/100): PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other in.