Information disclosure in Coxco Support A-Cart
CVE-2002-1432
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
Vulnerability class: Information Disclosure
EPSS: 0.078 (94.0th percentile) — read the EPSS interpretation.
Affected products
- Coxco_support A-cart — versions 2.0
- Coxco_support Metacart — versions 2.sql
- Coxco_support Midicart_asp
- Coxco_support Midicart_asp_maxi
- Coxco_support Midicart_asp_plus
- Coxco_support Salescart-pro
- Coxco_support Salescart-std
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)