CVE-2003-1268

Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Affected products

• A.shop.kart (Urlogy)

References

• http://secunia.com/advisories/7838
• http://www.centaura.com.ar/infosec/adv/ashopkart.txt
• http://www.iss.net/security_center/static/11029.php
• http://www.osvdb.org/37036
• http://www.osvdb.org/37037
• http://www.osvdb.org/37038
• http://www.securityfocus.com/archive/1/305685
• http://www.securityfocus.com/bid/6558
• http://www.securitytracker.com/id?1005903