Skip to content
Noroxi

vpasp records

4 published records for vendor vpasp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    4 records
    • CVE-2010-1588
      30Monitor

      SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlie

      HighCVSS 7.5No exploitEPSS 1%

      vpasp · vp-asp shopping cartApr 28, 2010

    • CVE-2008-5929
      21Monitor

      VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers to

      MediumCVSS 5.0Proof of conceptEPSS 2%

      vpasp · vp-asp shopping cartJan 21, 2009

    • CVE-2010-1589
      20Monitor

      Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote

      MediumCVSS 5.0No exploitEPSS 1%

      vpasp · vp-asp shopping cartApr 28, 2010

    • CVE-2010-1590
      17Monitor

      Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow

      MediumCVSS 4.3No exploitEPSS 0%

      vpasp · vp-asp shopping cartApr 28, 2010