CVE-2003-0557

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-08-18

Last modified

2024-08-08

Affected products

• Storefront (Lagarde)

References

• http://marc.info/?l=bugtraq&m=105804683203384&w=2