shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service (connection consumption).
Affected Software
Name |
Vendor |
Start Version |
End Version |
Vp-asp |
Virtual_programming |
5.0 |
5.0 |
References