CVE-2003-0509

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

5.85% chance of exploitation in the next 30 days, 93th percentile

Published

2003-07-04

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=105709450711395&w=2

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/25923
• https://www.exploit-db.com/exploits/25922

References

• CVE Record
• NVD entry

Related

• CVE-2003-0508
• CVE-2003-0510
• CVE-2003-0501
• CVE-2003-0511
• CVE-2003-0500
• CVE-2003-0514