CVE-2003-0560 SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.

HighCVSS 10.0 EPSS 3.2%

Published: 2003-07-15 07:00
Updated: 2026-06-17 01:02
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.

Affected products

Product	Affected versions	Fixed in
virtual programming vp-asp	= 5.0	No fix listed

References

20030704 VPASP SQL Injection Vulnerability & Exploit CODE mailing-list
8159 exploit vdb-entry vendor-advisory

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.17% (percentile 88.2)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Virtual Programming VP-ASP 5.00 - 'shopexd.asp' SQL Injection (2) Exploit · Exploit Database (OffSec) · 2003-07-10
Virtual Programming VP-ASP 5.00 - 'shopexd.asp' SQL Injection (1) Exploit · Exploit Database (OffSec) · 2003-07-10