CVE-2003-0509

Published: Aug 7, 2003Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.

Affected (1)

Products: Cyberstrong: Eshop

Cyberstrong

1 product

Eshop

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cyberstrong Eshop	version ≤ 4.2

References (20)

http://marc.info/?l=bugtraq&m=105709450711395&w=2

Source: cve@mitre.org

http://secunia.com/advisories/9165

Source: cve@mitre.org

http://securitytracker.com/id?1007092

Source: cve@mitre.org

http://www.osvdb.org/10098

Source: cve@mitre.org

http://www.osvdb.org/10099

Source: cve@mitre.org

http://www.osvdb.org/10100

Source: cve@mitre.org

http://www.securityfocus.com/bid/14101

Source: cve@mitre.org

http://www.securityfocus.com/bid/14103

Source: cve@mitre.org

http://www.securityfocus.com/bid/14112

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/12485

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105709450711395&w=2