← Back

CVE-2002-1432

nvd nist
Published: Apr 11, 2003Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.

Affected (7)

Coxco Support
7 products
A Cart
Metacart
Midicart Asp
Midicart Asp Maxi
Midicart Asp Plus
Salescart Pro
Salescart Std
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
A Cart
Version 2.0
Metacart
Version 2.sql
Midicart Asp
All versions
Midicart Asp Maxi
All versions
Midicart Asp Plus
All versions
Salescart Pro
All versions
Salescart Std
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory

Timeline

No history available yet.