« Volver al listado

CVE-2002-1432

Estado: ModificadaMedia (5)—

MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Coxco Support — A-cartCoxco Support — MetacartCoxco Support — Midicart ASPCoxco Support — Midicart ASP MaxiCoxco Support — Midicart ASP PlusCoxco Support — Salescart-proCoxco Support — Salescart-std

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-1432",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-04-11T04:00:00.000",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.html",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/9816.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/5438",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.html",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/9816.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/5438",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database."
    },
    {
      "lang": "es",
      "value": "MidiCart almacena el fichero de base de datos midicart.mdb bajo la raíz de documentos web, lo que permite a atacantes remotos robar información sensible pidiendo la base de datos directamente."
    }
  ],
  "lastModified": "2026-06-16T21:59:19.087",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:coxco_support:a-cart:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "391B12E6-EEBF-4FE7-B04D-1070511230EA"
            },
            {
              "criteria": "cpe:2.3:a:coxco_support:metacart:2.sql:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9045F4F1-87EC-4911-A5C5-2F33FDFCF1CC"
            },
            {
              "criteria": "cpe:2.3:a:coxco_support:midicart_asp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89A40FA1-8D3F-48D3-96A5-3C38D54659A3"
            },
            {
              "criteria": "cpe:2.3:a:coxco_support:midicart_asp_maxi:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD94726E-FCF7-41AA-9792-32D2C836F0D9"
            },
            {
              "criteria": "cpe:2.3:a:coxco_support:midicart_asp_plus:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F24531DB-5A27-450A-B6FA-7E015039BF5C"
            },
            {
              "criteria": "cpe:2.3:a:coxco_support:salescart-pro:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7EA180C-436C-4607-8D07-A1E26B50BE14"
            },
            {
              "criteria": "cpe:2.3:a:coxco_support:salescart-std:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "373E8A60-BEE7-4A70-9A65-1A0EC04F3422"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}