Vulnerability Details CVE-2004-0348
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.033
EPSS Ranking 87.5%
CVSS Severity
CVSS v2 Score 10.0
References
- http://marc.info/?l=bugtraq&m=107833097705486&w=2
- http://www.s-quadra.com/advisories/Adv-20040303.txt
- http://www.securityfocus.com/bid/9799
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15371
- http://marc.info/?l=bugtraq&m=107833097705486&w=2
- http://www.s-quadra.com/advisories/Adv-20040303.txt
- http://www.securityfocus.com/bid/9799
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15371
Products affected by CVE-2004-0348
-
cpe:2.3:a:spidersales:spidersales:2.0