Read the docs

Vpasp

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Vpasp records in CISA KEV

No Vpasp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vp-asp Shopping Cart 4 records LOW

Records

4 records

TI-2008-05625 CVE-2008-5929 · GHSA-8p32-q5c5-q65x

VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with…

Priority LOW 28

VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database containing the password via a direct request for database…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02587 Published 2009-01-21 No fix listed CWE-264
TI-2010-01533 CVE-2010-1589 · GHSA-4ph4-gqf8-q98f

Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP…

Priority LOW 26

Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to determine the existence of arbitrary files via directory traversal…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01564 Published 2010-04-28 No fix listed CWE-22
TI-2010-01534 CVE-2010-1590 · GHSA-j6r3-52x6-w8pf

Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hos…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00876 Published 2010-04-28 No fix listed CWE-79
Open these records in search →