⌘ + K

Vpasp

Dashboard / Vendors

Products: 1

Vulnerabilities: 4

Known Exploited: 0

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Vulnerabilities

100806040200

JanFebMarAprMayJunJulAugSepOctNovDec

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Products Security index

Actions

Vp-asp Shopping Cart

Application

Items Per Page

Vulnerabilities

CVE-2010-1588

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter.

Last Modified: Apr 11, 2025

Published: Apr 28, 2010

CVE-2010-1589

Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to determine the existence of arbitrary files via directory traversal sequences in the client's DNS hostname (aka the REMOTE_HOST variable), related to the CookielessGenerateFilename and CookielessReadFile functions.

Last Modified: Apr 11, 2025

Published: Apr 28, 2010

CVE-2010-1590

Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hostname (aka the REMOTE_HOST variable), related to the CookielessGenerateFilename and CookielessReadFile functions.

Last Modified: Apr 11, 2025

Published: Apr 28, 2010

CVE-2008-5929

VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database containing the password via a direct request for database/shopping650.mdb. NOTE: some of these details are obtained from third party information.

Last Modified: Apr 23, 2026

Published: Jan 21, 2009

Items Per Page