critical10.0Public exploit code
CVE-2003-0560
SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Virtual Programming VP-ASP 5.00 - 'shopexd.asp' SQL Injection (2)2003-07-10 · webapps · asp · Verified
- Virtual Programming VP-ASP 5.00 - 'shopexd.asp' SQL Injection (1)2003-07-10 · webapps · asp · Verified
Impact
SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Virtual Programming | Vp-Asp | Version 5.0 |