Login Request a demo
VP
Product
Vp-asp
by Virtual Programming · last CVE Jan 13, 2007
10
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities10Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Vp-asp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2007-0225
–
2%
Jan 13
Cross-site scripting (XSS) vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg…
Affected: 6.09
CVE-2007-0224
–
1%
Jan 13
SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname…
Affected: 6.09
CVE-2006-2263
–
1%
May 9
SQL injection vulnerability in shopcurrency.asp in VP-ASP 6.00 allows remote attackers to execute arbitrary SQL commands via the cid parameter
Affected: 6.00
CVE-2005-3685
–
2%
Nov 19
Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter
Affected: 5.50
CVE-2004-2413
–
1%
Dec 31
SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the (1) Processed0 and (2) Processed1 parameters…
Affected: 4.0; 4.50; 5.0
CVE-2004-2164
–
2%
Dec 31
shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service…
Affected: 5.0
CVE-2004-2411
–
2%
Dec 31
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site…
Affected: 4.0; 4.50; 5.0
CVE-2004-2412
–
1%
Dec 31
Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in (1)…
Affected: 4.0; 4.50; 5.0
CVE-2003-0560
–
3%
Aug 18
SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter
Affected: 5.0
CVE-2002-1919
–
2%
Dec 31
SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password…
Affected: 4.0
Showing 10