Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Vpasp Component: Vp-asp Shopping Cart Clear all filters
TI-2010-01534 CVE-2010-1590 · GHSA-j6r3-52x6-w8pf

Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hos…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00876 Published 2010-04-28 No fix listed CWE-79
TI-2010-01533 CVE-2010-1589 · GHSA-4ph4-gqf8-q98f

Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP…

Priority LOW 26

Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to determine the existence of arbitrary files via directory traversal…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01564 Published 2010-04-28 No fix listed CWE-22
TI-2008-05625 CVE-2008-5929 · GHSA-8p32-q5c5-q65x

VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with…

Priority LOW 28

VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database containing the password via a direct request for database…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02587 Published 2009-01-21 No fix listed CWE-264