VulnerabilityModified
CVE-2002-1432
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
MEDIUM 5.0EPSS 7.77%
Does this matter?
Lower severity and a low EPSS score (7.77%). Track it; it rarely justifies an emergency change on its own.
Description
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 7.77% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- coxco support/a-cart · coxco support/metacart · coxco support/midicart asp · coxco support/midicart asp maxi · coxco support/midicart asp plus · coxco support/salescart-pro · coxco support/salescart-std
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.htmlExploit, Patch
- http://www.iss.net/security_center/static/9816.phpPatch, Vendor Advisory
- http://www.securityfocus.com/bid/5438Exploit, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.htmlExploit, Patch
- http://www.iss.net/security_center/static/9816.phpPatch, Vendor Advisory
- http://www.securityfocus.com/bid/5438Exploit, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.