10

CVE-2003-0522

Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Early Impact ≫ Productcart Version 1.5
Early Impact ≫ Productcart Version 1.6b
Early Impact ≫ Productcart Version 1.6b001
Early Impact ≫ Productcart Version 1.6b002
Early Impact ≫ Productcart Version 1.6b003
Early Impact ≫ Productcart Version 1.6br
Early Impact ≫ Productcart Version 1.6br001
Early Impact ≫ Productcart Version 1.6br003
Early Impact ≫ Productcart Version 1.5002
Early Impact ≫ Productcart Version 1.5003
Early Impact ≫ Productcart Version 1.5003r
Early Impact ≫ Productcart Version 1.5004
Early Impact ≫ Productcart Version 1.6002
Early Impact ≫ Productcart Version 1.6003
Early Impact ≫ Productcart Version 2
Early Impact ≫ Productcart Version 2br000
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.87% 0.766
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=105733145930031&w=2
http://marc.info/?l=bugtraq&m=105760660928715&w=2