{"id":"CVE-2003-1268","state":"PUBLISHED","title":"Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain s","description":"Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters.","publishedAt":"2005-11-16T07:37:00.000Z","updatedAt":"2024-08-08T02:19:46.121Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.iss.net/security_center/static/11029.php","http://www.securityfocus.com/bid/6558","http://www.osvdb.org/37036","http://www.osvdb.org/37038","http://www.osvdb.org/37037","http://www.securityfocus.com/archive/1/305685","http://www.centaura.com.ar/infosec/adv/ashopkart.txt","http://secunia.com/advisories/7838","http://www.securitytracker.com/id?1005903"],"weaknesses":[],"ingestedAt":"2026-10-29T19:26:52.691Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2003/1xxx/CVE-2003-1268.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2003-1268","state":"PUBLISHED","datePublished":"2005-11-16T07:37:00.000Z","dateUpdated":"2024-08-08T02:19:46.121Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2005-11-16T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.iss.net/security_center/static/11029.php","name":"ashopkart-multiple-sql-injection(11029)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/bid/6558","name":"6558","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.osvdb.org/37036","name":"37036","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.osvdb.org/37038","name":"37038","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.osvdb.org/37037","name":"37037","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.securityfocus.com/archive/1/305685","name":"20030108 a.shopKart Shopping Cart remote vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.centaura.com.ar/infosec/adv/ashopkart.txt","tags":["x_refsource_MISC"]},{"url":"http://secunia.com/advisories/7838","name":"7838","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securitytracker.com/id?1005903","name":"1005903","tags":["vdb-entry","x_refsource_SECTRACK"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2007-10-31T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2003-01-08T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2003-1268","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ashopkart-multiple-sql-injection(11029)","refsource":"XF","url":"http://www.iss.net/security_center/static/11029.php"},{"name":"6558","refsource":"BID","url":"http://www.securityfocus.com/bid/6558"},{"name":"37036","refsource":"OSVDB","url":"http://www.osvdb.org/37036"},{"name":"37038","refsource":"OSVDB","url":"http://www.osvdb.org/37038"},{"name":"37037","refsource":"OSVDB","url":"http://www.osvdb.org/37037"},{"name":"20030108 a.shopKart Shopping Cart remote vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/305685"},{"name":"http://www.centaura.com.ar/infosec/adv/ashopkart.txt","refsource":"MISC","url":"http://www.centaura.com.ar/infosec/adv/ashopkart.txt"},{"name":"7838","refsource":"SECUNIA","url":"http://secunia.com/advisories/7838"},{"name":"1005903","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1005903"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.iss.net/security_center/static/11029.php","name":"ashopkart-multiple-sql-injection(11029)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/6558","name":"6558","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.osvdb.org/37036","name":"37036","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/37038","name":"37038","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/37037","name":"37037","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/305685","name":"20030108 a.shopKart Shopping Cart remote vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.centaura.com.ar/infosec/adv/ashopkart.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://secunia.com/advisories/7838","name":"7838","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securitytracker.com/id?1005903","name":"1005903","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-08T02:19:46.121Z"}}]}}}