← Database

CVE-2003-0509

CRITICAL CVSS: 10.0 Published: 2003-08-07 Modified: 2026-06-16

Description

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.

Affected Platforms

Cyberstrong Eshop

Weakness Type

NVD-CWE-Other

References