CVE:CVE-2003-0585
CNNVD:CNNVD-200308-069
Brooky eStore 1.0.1至1.0.2b版本的login.asp存在SQL注入漏洞。远程攻击者借助(1)user或者(2)pass参数绕过认证且执行任意SQL代码。
solution:Upgrade brooky estore to a higher version than 1.0.2b,and avoid the version 1.0.2b