CVE-2005-3685

no score yetEPSS 1.9%

virtual programming vp-asp: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-11-01)
Published: 2005-11-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

virtual_programming:vp-asp

References

http://membres.lycos.fr/newnst/exploit/VPASP%20Shopping_By_ConcorDHacK.txt
http://secunia.com/advisories/17602
http://securitytracker.com/id?1015238
http://www.osvdb.org/20954
http://www.securityfocus.com/bid/15490

Check your stack JSON