CVE-2003-1268

Published: Dec 31, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters.

Affected (1)

Products: Urlogy: A.shop.kart

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Urlogy A.shop.kart	Version 2.0.3

References (18)

http://secunia.com/advisories/7838

Source: cve@mitre.org

http://www.centaura.com.ar/infosec/adv/ashopkart.txt

Source: cve@mitre.org

http://www.iss.net/security_center/static/11029.php

Source: cve@mitre.org

http://www.osvdb.org/37036

Source: cve@mitre.org

http://www.osvdb.org/37037

Source: cve@mitre.org

http://www.osvdb.org/37038

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/305685

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/6558

Source: cve@mitre.org

http://www.securitytracker.com/id?1005903

Source: cve@mitre.org

http://secunia.com/advisories/7838

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.centaura.com.ar/infosec/adv/ashopkart.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/11029.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/37036

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/37037

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/37038

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/305685

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/6558

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1005903

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.