CVE-1999-0607

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Apr 20, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-06085.0An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.CVE-1999-06095.0An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.CVE-1999-06105.0An incorrect configuration of the Webcart CGI program could disclose private information.CVE-1999-061110.0A system-critical Windows NT registry key has an inappropriate value.CVE-1999-06130.0The rpc.sprayd service is running.CVE-1999-061810.0The rexec service is running.CVE-1999-06240.0The rstat/rstatd service is running.CVE-1999-06250.0The rpc.rquotad service is running.CVE-1999-06290.0The ident/identd service is running.CVE-1999-063010.0The NT Alerter and Messenger services are running.CVE-1999-06325.3The RPC portmapper service is running.CVE-1999-06350.0The echo service is running.