Lucene search

[email protected]CVE-2002-1432

HistoryApr 11, 2003 - 4:00 a.m.

CVE-2002-1432

2003-04-1104:00:00

CWE-200

[email protected]

web.nvd.nist.gov

midicart

cve-2002-1432

security

database

web security

remote attackers

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.7%

JSON

MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.

Affected configurations

NVD

Node

coxco_supporta-cartMatch2.0

coxco_supportmetacartMatch2.sql

coxco_supportmidicart_asp

coxco_supportmidicart_asp_maxi

coxco_supportmidicart_asp_plus

coxco_supportsalescart-pro

coxco_supportsalescart-std

CPENameOperatorVersion
coxco_support:a-cartcoxco support a-carteq2.0
coxco_support:metacartcoxco support metacarteq2.sql
coxco_support:midicart_aspcoxco support midicart aspeq*
coxco_support:midicart_asp_maxicoxco support midicart asp maxieq*
coxco_support:midicart_asp_pluscoxco support midicart asp pluseq*
coxco_support:salescart-procoxco support salescart-proeq*
coxco_support:salescart-stdcoxco support salescart-stdeq*

CPE	Name	Operator	Version
coxco_support:a-cart	coxco support a-cart	eq	2.0
coxco_support:metacart	coxco support metacart	eq	2.sql
coxco_support:midicart_asp	coxco support midicart asp	eq	*
coxco_support:midicart_asp_maxi	coxco support midicart asp maxi	eq	*
coxco_support:midicart_asp_plus	coxco support midicart asp plus	eq	*
coxco_support:salescart-pro	coxco support salescart-pro	eq	*
coxco_support:salescart-std	coxco support salescart-std	eq	*

References

archives.neohapsis.com/archives/bugtraq/2002-08/0074.html

www.iss.net/security_center/static/9816.php

www.securityfocus.com/bid/5438

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.7%

JSON

Related for CVE-2002-1432

cvelist1 nvd1