CVE-2008-0449

VP-ASP Shopping Cart <= 6.50 - SQL Injection via paypalresult.asp

Title source: llm

Description

SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/39811

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/27347

Scores

EPSS 0.0100

EPSS Percentile 59.4%

Details

CWE

CWE-89

Status published

Products (6)

rocksalt_international/vp_asp 4.00

rocksalt_international/vp_asp 4.50

rocksalt_international/vp_asp 5.00

rocksalt_international/vp_asp 5.50

rocksalt_international/vp_asp 6.00

rocksalt_international/vp_asp 6.50

Published Jan 25, 2008

Tracked Since Feb 18, 2026