CVE-2004-2412

no score yetEPSS 1.2%

virtual programming vp-asp: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in (1) shopreviewlist.asp and (2) shopreviewadd.asp.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
Published: 2004-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

virtual_programming:vp-asp

References

http://secunia.com/advisories/11201
http://www.securityfocus.com/bid/9967
http://www.vpasp.com/virtprog/info/faq_securityfixes.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/15588
http://secunia.com/advisories/11201

Check your stack JSON