CVE-2004-0300

SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_brand.php, or (4) the id parameter in listing.php.

• http://marc.info/?l=bugtraq&m=107712117913185&w=2
• http://secunia.com/advisories/10902/
• http://securitytracker.com/alerts/2004/Feb/1009092.html
• http://www.osvdb.org/3973
• http://www.securityfocus.com/bid/9676Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9687Vendor Advisory
• http://www.systemsecure.org/advisories/ssadvisory16022004.php
• http://www.zone-h.org/en/advisories/read/id=3972/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15232
• http://marc.info/?l=bugtraq&m=107712117913185&w=2
• http://secunia.com/advisories/10902/
• http://securitytracker.com/alerts/2004/Feb/1009092.html
• http://www.osvdb.org/3973
• http://www.securityfocus.com/bid/9676Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9687Vendor Advisory
• http://www.systemsecure.org/advisories/ssadvisory16022004.php
• http://www.zone-h.org/en/advisories/read/id=3972/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15232

Published

Nov 23, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0294YaBB 1 SP 1.3.1 displays different error messages when a use…
• CVE-2004-0295TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers t…
• CVE-2004-0296TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers t…
• CVE-2004-0297Buffer overflow in the Lightweight Directory Access Protocol…
• CVE-2004-0298CesarFTP 0.99e allows remote attackers to cause a denial of …
• CVE-2004-0299Buffer overflow in smallftpd 0.99 allows local users to caus…
• CVE-2004-0301Cross-site scripting (XSS) vulnerability in more.php for Onl…
• CVE-2004-0302Directory traversal vulnerability in OWLS 1.0 allows remote …
• CVE-2004-0303OWLS 1.0 allows remote attackers to retrieve arbitrary files…
• CVE-2004-0304SQL injection vulnerability in browse_items.asp in WebCortex…
• CVE-2004-0305Cross-site scripting (XSS) vulnerability in error.asp in Web…
• CVE-2004-0306Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS …