critical10.0Public exploit code
CVE-2004-0304
SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary comma…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebCortex WebStores2000 - SQL Injection2003-05-31 · webapps · asp · Verified
Impact
SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webcortex | Webstores 2000 | Version 6.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107712159425226&w=2
- http://www.s-quadra.com/advisories/Adv-20040218.txt
- http://www.securityfocus.com/bid/7766
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15253
- http://marc.info/?l=bugtraq&m=107712159425226&w=2
- http://www.s-quadra.com/advisories/Adv-20040218.txt
- http://www.securityfocus.com/bid/7766
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15253