CVE-2003-1304

Published: Dec 31, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information via a direct request.

Affected (27)

Products: Early Impact: Productcart

Early Impact

1 product

Productcart

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Early Impact Productcart	Version 1.1
Early Impact Productcart	Version 1.2
Early Impact Productcart	Version 1.3
Early Impact Productcart	Version 1.4
Early Impact Productcart	Version 1.5002
Early Impact Productcart	Version 1.5003
Early Impact Productcart	Version 1.5003r
Early Impact Productcart	Version 1.5004
Early Impact Productcart	Version 1.5
Early Impact Productcart	Version 1.6002
Early Impact Productcart	Version 1.6003
Early Impact Productcart	Version 1.6_b001
Early Impact Productcart	Version 1.6_b002
Early Impact Productcart	Version 1.6_b003
Early Impact Productcart	Version 1.6_b
Early Impact Productcart	Version 1.6_br001
Early Impact Productcart	Version 1.6_br003
Early Impact Productcart	Version 1.6_br
Early Impact Productcart	Version 1.6b001
Early Impact Productcart	Version 1.6b002
Early Impact Productcart	Version 1.6b003
Early Impact Productcart	Version 1.6b
Early Impact Productcart	Version 1.6br001
Early Impact Productcart	Version 1.6br003
Early Impact Productcart	Version 1.6br
Early Impact Productcart	Version 2.0
Early Impact Productcart	Version 2