CVE-2003-0585

The vulnerability (CVE-2003-0585) affects Brooky eStore 1.0.1–1.0.2b, comprising an SQL injection in login.asp that lets remote attackers bypass authentication and execute arbitrary SQL via the (1) user or (2) pass parameters. No additional exploit or patch details are provided in the supplied do...

CVE-2003-0586

Brooky eStore 1.0.1 through 1.0.2b is affected by a vulnerability that allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php. The issue impacts confidentiality (partial). No explicit exploitation details or remediation are provided in the suppl...