CVE-2003-1268

CVE-2003-1268 describes multiple SQL injection vulnerabilities in a.shopKart 2.0.3, specifically within the addcustomer.asp, addprod.asp, and process.asp files. These flaws allow remote attackers to execute arbitrary SQL commands and retrieve sensitive information by manipulating parameters like zip, state, country, phone, and fax. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its low attack complexity and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.