CVE-2003-0522

CVE-2003-0522 describes multiple SQL injection vulnerabilities present in ProductCart versions 1.5 through 2. These flaws allow remote attackers to bypass authentication and gain administrative access via the idadmin parameter in login.asp, or escalate privileges through the Email parameter in Custva.asp. With a CVSS score of 10.0, this vulnerability is critically severe, indicating a network-based attack with low complexity, requiring no authentication, and leading to complete compromise of confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.