CVE-2003-0509

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0510%

EPSS Percentile29.57th

Published2003年8月7日

Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.

Affected Platforms (CPE)

📦

Cyberstrong

Eshop

<= 4.2

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=105709450711395&w=2

🔗 http://secunia.com/advisories/9165

🔗 http://securitytracker.com/id?1007092

🔗 http://www.osvdb.org/10098

🔗 http://www.osvdb.org/10099

🔗 http://www.osvdb.org/10100

🔗 http://www.securityfocus.com/bid/14101

🔗 http://www.securityfocus.com/bid/14103

Vulnerability Description

Affected Platforms (CPE)

Eshop

References & Advisories

相關漏洞威脅