10
CVE-2003-0509
- EPSS 5.86%
- Veröffentlicht 07.08.2003 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:02:20
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cyberstrong ≫ Eshop Version <= 4.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.86% | 0.922 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
http://marc.info/?l=bugtraq&m=105709450711395&w=2
http://secunia.com/advisories/9165
http://securitytracker.com/id?1007092
http://www.osvdb.org/10098
http://www.osvdb.org/10099
http://www.osvdb.org/10100
http://www.securityfocus.com/bid/14101
http://www.securityfocus.com/bid/14103
http://www.securityfocus.com/bid/14112
https://exchange.xforce.ibmcloud.com/vulnerabilities/12485