CVE-2003-0522 in Productcart

Summary

Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 07/08/2003
• Disclosure: 08/18/2003
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-89 (Confirmed)
• CVSS: 9.8
• EPSS: 0.00461
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0522
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0522
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0522/