NetSight
IP …
medium5.0Public exploit code

CVE-2002-1432

MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.

Affected products

VendorProductAffected versions
Coxco SupportA-Cart
Version 2.0
Coxco SupportMetacart
Version 2.sql
Coxco SupportMidicart Asp
All versions
Coxco SupportMidicart Asp Maxi
All versions
Coxco SupportMidicart Asp Plus
All versions
Coxco SupportSalescart-Pro
All versions
Coxco SupportSalescart-Std
All versions

Weakness classification

CWE-200

References