CVE-2004-0348 in Spidersales

Summary

SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 11/23/2004
• Moderation: VulDB entry created
• Entries: VDB-22481 (1)
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 9.8
• EPSS: 0.00561
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0348
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0348
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0348/