Vulnerability record · CVE-2004-0300 · published 23 November 2004

CVE-2004-0300: Ecommerce corporation online store kit vulnerability

EEcommerce Corporation Online · Store Kit

SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_brand.php, or (4) the id parameter in listing.php.

10.0 CVSS 2.0 High EPSS 5.2% · top 7.8%

10.0CVSS 2.0 base score

5.2%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

18References, 2 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

EStore Kit Ecommerce Corporation Online

References

Link	Tags
http://marc.info/?l=bugtraq&m=107712117913185&w=2
http://secunia.com/advisories/10902/
http://securitytracker.com/alerts/2004/Feb/1009092.html
http://www.osvdb.org/3973
http://www.securityfocus.com/bid/9676	ExploitVendor Advisory
http://www.securityfocus.com/bid/9687	Vendor Advisory
http://www.systemsecure.org/advisories/ssadvisory16022004.php
http://www.zone-h.org/en/advisories/read/id=3972/
https://exchange.xforce.ibmcloud.com/vulnerabilities/15232
http://marc.info/?l=bugtraq&m=107712117913185&w=2
http://secunia.com/advisories/10902/
http://securitytracker.com/alerts/2004/Feb/1009092.html
http://www.osvdb.org/3973
http://www.securityfocus.com/bid/9676	ExploitVendor Advisory
http://www.securityfocus.com/bid/9687	Vendor Advisory
http://www.systemsecure.org/advisories/ssadvisory16022004.php
http://www.zone-h.org/en/advisories/read/id=3972/
https://exchange.xforce.ibmcloud.com/vulnerabilities/15232

Track CVE-2004-0300 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.8CVE-2004-0301Ecommerce corporation online store kit vulnerabilityCross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter.EPSS 4.2%23 Nov 2004

Source: NIST National Vulnerability Database (record CVE-2004-0300), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.