CVE-2003-0509: Cyberstrong Eshop

High severity, CVSS 10.0. EPSS: 5.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.

Affected products

• Cyberstrong Eshop: up to and including 4.2

Published 2003-08-07. Last modified 2026-06-16.