« Volver al listado

CVE-2003-0522

Estado: ModificadaAlta (10)—

Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2003-0522",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-08-18T04:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=105733145930031&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=105760660928715&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=105733145930031&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=105760660928715&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de inyección de SQL en ProductCart 1.5 a 2 permite a atacantes remotos \r\nganar acceso al panel de control de admin mediante el parámetro idadmin de login.asp, o \r\nganar otros privilegios mediante el parámetro email de custva.asp."
    }
  ],
  "lastModified": "2026-06-16T22:02:21.720",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "187A49C7-29D2-4288-BC2C-1C341970DA3A"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.6b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95937001-3EE3-433D-B713-582E996F0519"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.6b001:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36E8BEC1-2B71-4276-A4D9-6E9E4AB386BD"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.6b002:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F73F4B7-552A-4B39-AE4E-9719E54EC127"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.6b003:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "621827C0-88A6-4401-9089-11C69A6415D3"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.6br:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E656346-5C64-4728-99AA-788E907EC102"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.6br001:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A41B3128-5AAB-4569-9671-C414B00750D4"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.6br003:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02478E47-A2DC-46D3-9688-1C169E53D061"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.5002:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BA9179C-B8E8-4AD8-96A3-C5A266CF3A6F"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.5003:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2633071B-D162-4F9B-962F-849AC7787A8D"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.5003r:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8963787A-0A12-4817-9131-75D25A2701E3"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.5004:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3CA232AA-BDD2-4B9A-8AB8-E4B1C507C807"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.6002:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8468FBB-4275-4051-9499-896EA3B2E53B"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:1.6003:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D013E775-C9FE-46E1-8DF3-414306EE7826"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38955E18-4972-48B6-BE42-9D26D0DE4DF7"
            },
            {
              "criteria": "cpe:2.3:a:early_impact:productcart:2br000:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FEBD6A4-F3DD-44FB-B289-A26394177B04"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}