CVE-2003-1532

SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1) identifiant and (2) password parameters.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Weaknesses

CWE-89

Affected products

• Phpmyshop (Julien Desaunay)

References

• http://secunia.com/advisories/7990
• http://securityreason.com/securityalert/3348
• http://www.securityfocus.com/archive/1/309921/30/26090/threaded
• http://www.securityfocus.com/bid/6746
• http://www.securitytracker.com/id?1006030