Lucene search

[email protected]CVE-2004-2413

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2413

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

sql injection

vulnerability

vp-asp shopping cart

remote attack

nvd

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.3%

JSON

SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the (1) Processed0 and (2) Processed1 parameters in a POST request to shopproductselect.asp.

CPENameOperatorVersion
virtual_programming:vp-aspvirtual programming vp-aspeq4.0
virtual_programming:vp-aspvirtual programming vp-aspeq5.0
virtual_programming:vp-aspvirtual programming vp-aspeq4.50

CPE	Name	Operator	Version
virtual_programming:vp-asp	virtual programming vp-asp	eq	4.0
virtual_programming:vp-asp	virtual programming vp-asp	eq	5.0
virtual_programming:vp-asp	virtual programming vp-asp	eq	4.50

References

archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html

www.securityfocus.com/bid/10536

exchange.xforce.ibmcloud.com/vulnerabilities/16400

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.3%

JSON