CVE-2002-1432

MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-04-11

Last modified

2024-08-08

Weaknesses

CWE-200

Affected products

• A-cart (Coxco Support)
• Metacart (Coxco Support)
• Midicart Asp (Coxco Support)
• Midicart Asp Maxi (Coxco Support)
• Midicart Asp Plus (Coxco Support)
• Salescart-pro (Coxco Support)
• Salescart-std (Coxco Support)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.html
• http://www.iss.net/security_center/static/9816.php
• http://www.securityfocus.com/bid/5438