7.5
CVE-2003-1268
- EPSS 1.72%
- Veröffentlicht 31.12.2003 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:03:49
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Urlogy ≫ A.Shop.Kart Version2.0.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.72% | 0.745 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/7838
http://www.centaura.com.ar/infosec/adv/ashopkart.txt
http://www.iss.net/security_center/static/11029.php
http://www.osvdb.org/37036
http://www.osvdb.org/37037
http://www.osvdb.org/37038
http://www.securityfocus.com/archive/1/305685
http://www.securityfocus.com/bid/6558
http://www.securitytracker.com/id?1005903