PT-2002-3022 · Clickcartpro · Clickcartpro

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2310

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: ClickCartPro version 4.0

Description: The issue concerns insufficient access control on the admin user.db data file stored under the web document root in ClickCartPro, allowing remote attackers to obtain usernames and passwords on servers other than Apache.

Recommendations: For ClickCartPro version 4.0, consider restricting access to the admin user.db data file to prevent unauthorized access until a proper fix is applied. As a temporary workaround, moving the admin user.db file outside of the web document root can help minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2002-2310

Produtos afetados

Clickcartpro

Referências · 4

• 🔥 http://securiteam.com/securitynews/5DP0T0K7PY.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2310 · Nota de Segurança
• http://iss.net/security_center/static/9648.php · Nota
• http://securitytracker.com/id?1004825 · Nota