7.5
CVSSv2

CVE-2003-0557

Published: 18/08/2003 Updated: 18/10/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote malicious users to obtain sensitive user information via SQL statements in the password field.

Vulnerable Product Search on Vulmon Subscribe to Product

lagarde storefront

Exploits

source: wwwsecurityfocuscom/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability The vulnerability affects the 'loginasp' script Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the under ...