CVE-2003-0509

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.

Scoring

CVSS base score
0.23
EPSS probability
5.79%
Published
2003-07-04
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs