CVE-2003-0522: Early Impact Productcart

High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.

Affected products

• Early Impact Productcart: version 1.5 only; version 1.6b only; version 1.6b001 only; version 1.6b002 only; version 1.6b003 only; version 1.6br only; …

Published 2003-08-18. Last modified 2026-06-16.