high7.5Public exploit code
CVE-2003-1532
SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1) identifiant and (2) password …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHPMyShop 1.0 - 'compte.php' SQL Injection2003-02-03 · webapps · php · Verified
Impact
SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1) identifiant and (2) password parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Julien Desaunay | Phpmyshop | Version 1.00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/7990
- http://securityreason.com/securityalert/3348
- http://www.securityfocus.com/archive/1/309921/30/26090/threaded
- http://www.securityfocus.com/bid/6746
- http://www.securitytracker.com/id?1006030
- http://secunia.com/advisories/7990
- http://securityreason.com/securityalert/3348
- http://www.securityfocus.com/archive/1/309921/30/26090/threaded
- http://www.securityfocus.com/bid/6746
- http://www.securitytracker.com/id?1006030