CVE-2010-1589

CVE-2010-1589 describes a directory traversal vulnerability in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier, specifically within the shopsessionsubs.asp component. This flaw allows remote attackers to determine the existence of arbitrary files by manipulating the client's DNS hostname (REMOTE_HOST variable) with directory traversal sequences, impacting the CookielessGenerateFilename and CookielessReadFile functions. The vulnerability carries a CVSS score of 5.0 (Medium), indicating a low attack complexity and no authentication required, but only impacts confidentiality (C:P) with no integrity or availability impact. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are virtually nonexistent, further indicating a low level of attention and perceived threat.