CVEブラウザに戻る

CVE-2004-0348

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1970%

EPSS Percentile14.67th

Published2004年11月23日

Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter.

Affected Platforms (CPE)

📦

Spidersales

Spidersales

= 2.0

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107833097705486&w=2

🔗 http://www.s-quadra.com/advisories/Adv-20040303.txt

🔗 http://www.securityfocus.com/bid/9799

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/15371

🔗 http://marc.info/?l=bugtraq&m=107833097705486&w=2

🔗 http://www.s-quadra.com/advisories/Adv-20040303.txt

🔗 http://www.securityfocus.com/bid/9799

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/15371

関連する脆弱性情報

CVE-2004-03502.1

SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtai...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...