Vulnerability Details CVE-2002-1432
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.078
EPSS Ranking 93.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.html
- http://www.iss.net/security_center/static/9816.php
- http://www.securityfocus.com/bid/5438
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.html
- http://www.iss.net/security_center/static/9816.php
- http://www.securityfocus.com/bid/5438
Products affected by CVE-2002-1432
-
cpe:2.3:a:coxco_support:a-cart:2.0
-
cpe:2.3:a:coxco_support:metacart:2.sql
-
cpe:2.3:a:coxco_support:midicart_asp:*
-
cpe:2.3:a:coxco_support:midicart_asp_maxi:*
-
cpe:2.3:a:coxco_support:midicart_asp_plus:*
-
cpe:2.3:a:coxco_support:salescart-pro:*
-
cpe:2.3:a:coxco_support:salescart-std:*