7.5
CVE-2004-2412
- EPSS 1.21%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:09:36
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in (1) shopreviewlist.asp and (2) shopreviewadd.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Virtual Programming ≫ Vp-asp Version4.0
Virtual Programming ≫ Vp-asp Version4.50
Virtual Programming ≫ Vp-asp Version5.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.21% | 0.645 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://www.vpasp.com/virtprog/info/faq_securityfixes.htm
http://secunia.com/advisories/11201
http://www.securityfocus.com/bid/9967
https://exchange.xforce.ibmcloud.com/vulnerabilities/15588