Description (CNA)
Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.iss.net/security_center/static/11029.php
- http://www.securityfocus.com/bid/6558
- http://www.osvdb.org/37036
- http://www.osvdb.org/37038
- http://www.osvdb.org/37037
- http://www.securityfocus.com/archive/1/305685
- http://www.centaura.com.ar/infosec/adv/ashopkart.txt
- http://secunia.com/advisories/7838
- http://www.securitytracker.com/id?1005903
ADP enrichment
No English description supplied.
- http://www.iss.net/security_center/static/11029.php
- http://www.securityfocus.com/bid/6558
- http://www.osvdb.org/37036
- http://www.osvdb.org/37038
- http://www.osvdb.org/37037
- http://www.securityfocus.com/archive/1/305685
- http://www.centaura.com.ar/infosec/adv/ashopkart.txt
- http://secunia.com/advisories/7838
- http://www.securitytracker.com/id?1005903