Vpasp Vp-asp Shopping Cart — known CVE vulnerabilities

Every CVE whose affected-product data names Vpasp Vp-asp Shopping Cart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2010-1588 — CVSS 7.5 (high): SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and…
• CVE-2008-5929 — CVSS 5.0 (medium): VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers…
• CVE-2010-1589 — CVSS 5.0 (medium): Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote…
• CVE-2010-1590 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow…