Cyberstrong » Eshop : Security Vulnerabilities, CVEs,
SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.
Max CVSS
10.0
EPSS Score
0.85%
Published
2003-08-07
Updated
2017-07-11
1 vulnerabilities found