Vulnerability Details CVE-2003-1304
EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information via a direct request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.075
EPSS Ranking 91.3%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2003-1304
-
cpe:2.3:a:early_impact:productcart:1.1
-
cpe:2.3:a:early_impact:productcart:1.2
-
cpe:2.3:a:early_impact:productcart:1.3
-
cpe:2.3:a:early_impact:productcart:1.4
-
cpe:2.3:a:early_impact:productcart:1.5
-
cpe:2.3:a:early_impact:productcart:1.5002
-
cpe:2.3:a:early_impact:productcart:1.5003
-
cpe:2.3:a:early_impact:productcart:1.5003r
-
cpe:2.3:a:early_impact:productcart:1.5004
-
cpe:2.3:a:early_impact:productcart:1.6002
-
cpe:2.3:a:early_impact:productcart:1.6003
-
cpe:2.3:a:early_impact:productcart:1.6_b
-
cpe:2.3:a:early_impact:productcart:1.6_b001
-
cpe:2.3:a:early_impact:productcart:1.6_b002
-
cpe:2.3:a:early_impact:productcart:1.6_b003
-
cpe:2.3:a:early_impact:productcart:1.6_br
-
cpe:2.3:a:early_impact:productcart:1.6_br001
-
cpe:2.3:a:early_impact:productcart:1.6_br003
-
cpe:2.3:a:early_impact:productcart:1.6b
-
cpe:2.3:a:early_impact:productcart:1.6b001
-
cpe:2.3:a:early_impact:productcart:1.6b002
-
cpe:2.3:a:early_impact:productcart:1.6b003
-
cpe:2.3:a:early_impact:productcart:1.6br
-
cpe:2.3:a:early_impact:productcart:1.6br001
-
cpe:2.3:a:early_impact:productcart:1.6br003
-
cpe:2.3:a:early_impact:productcart:2
-
cpe:2.3:a:early_impact:productcart:2.0