10
CVSSv2

CVE-2004-0304

Published: 23/11/2004 Updated: 11/07/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote malicious users to gain unauthorized access and execute arbitrary commands via the Search_Text parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

webcortex webstores 2000 6.0

Exploits

source: wwwsecurityfocuscom/bid/7766/info This vulnerability is reportedly caused by a lack of sufficient sanitization of user-supplied data contained in URI parameters supplied to WebStores2000 Successful exploitation may allow for modification of the structure of SQL queries, resulting in information disclosure, or database corruption ...