Vulnerability in Kryptronic Clickcartpro

CVE-2002-2310

ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords.

EPSS: 0.013 (67.7th percentile) — read the EPSS interpretation.

Affected products

Kryptronic Clickcartpro — versions 4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (Exploit, x_refsource_MISC)