| Package | Affected versions | Patched versions |
|---|---|---|
| vp-asp shopping cart | = 5.50= 6.00≤ 6.50 |
Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to determine the existence of arbitrary files via directory traversal sequences in the client's DNS hostname (aka the REMOTE_HOST variable), related to the CookielessGenerateFilename and CookielessReadFile functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free