CVE-2002-1432

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.htmlExploit, Patch
http://www.iss.net/security_center/static/9816.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5438Exploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-08/0074.htmlExploit, Patch
http://www.iss.net/security_center/static/9816.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5438Exploit, Vendor Advisory

Timeline

Published: Apr 11, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-14335.0Kerio MailServer 5.0 allows remote attackers to cause a denial of service (hang) via SYN packets to the supported network services.CVE-2002-14346.8Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML sc CVE-2002-14357.5class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'CVE-2002-14367.5The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST r CVE-2002-14375.0Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbi CVE-2002-14385.0The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v opt CVE-2002-14394.6Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 (VVOS) Virtualvault 4.0, 4.5, and 4.6 may allow attacker CVE-2002-144010.0The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow a CVE-2002-14417.5Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via (1) the Steelarrow Service CVE-2002-14427.5The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file CVE-2002-14435.0The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler.CVE-2002-14442.6The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with a