Vulnerability in Brooky Estore
CVE-2003-0585
SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters.
EPSS: 0.015 (72.0th percentile) — read the EPSS interpretation.
Affected products
- Brooky Estore — versions 1.0.2b
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)