CVE-2003-0509

CRITICAL 10.0CVE-2003-0509 · Published 07/08/2003 · updated 16/06/2026

In short

CVE-2003-0509 is a CRITICAL (CVSS 10.0) vulnerability affecting eshop (cyberstrong).
Chance of exploitation in the next 30 days (EPSS): 5.9%, higher than 93.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
eshop cyberstrong	`≤ 4.2`	No fix yet

Description

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.

References

marc.info
secunia.com/advisories/9165
securitytracker.com/id
osvdb.org/10098
osvdb.org/10099
osvdb.org/10100
securityfocus.com/bid/14101
securityfocus.com/bid/14103
securityfocus.com/bid/14112
exchange.xforce.ibmcloud.com/vulnerabilities/12485

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free