10

CVE-2003-0522

Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Early Impact ≫ Productcart Version1.5
Early Impact ≫ Productcart Version1.6b
Early Impact ≫ Productcart Version1.6b001
Early Impact ≫ Productcart Version1.6b002
Early Impact ≫ Productcart Version1.6b003
Early Impact ≫ Productcart Version1.6br
Early Impact ≫ Productcart Version1.6br001
Early Impact ≫ Productcart Version1.6br003
Early Impact ≫ Productcart Version1.5002
Early Impact ≫ Productcart Version1.5003
Early Impact ≫ Productcart Version1.5003r
Early Impact ≫ Productcart Version1.5004
Early Impact ≫ Productcart Version1.6002
Early Impact ≫ Productcart Version1.6003
Early Impact ≫ Productcart Version2
Early Impact ≫ Productcart Version2br000
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.612
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.