CVE-2003-0509

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

5.85% chance of exploitation in the next 30 days, 93rd percentile

Published

2003-07-04

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=105709450711395&w=2

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/25923
• https://www.exploit-db.com/exploits/25922

Security advisories

• http://www.securityfocus.com/bid/14101
• http://www.securityfocus.com/bid/14103
• http://www.securityfocus.com/bid/14112

References

• CVE Record
• NVD entry