CVE-2003-0509 SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2)....
HighCVSS 10.0
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cyberstrong eshop | <= 4.2 | No fix listed |
References
- 20030701 CyberStrong Shopping Cart - Advisory & Exploit Code mailing-list
- 9165 third-party-advisory
- 1007092 vdb-entry
- 10098 vdb-entry
- 10099 vdb-entry
- 10100 vdb-entry
- 14101 vdb-entry
- 14103 vdb-entry
- 14112 vdb-entry
- cyberstrongeshop-multiple-sql-injection(12485) vdb-entry