PT-2003-2249 · Early Impact · Productcart

Publicado 2003-12-31 · Atualizado 2018-10-19 · CVE-2003-1304

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EarlyImpact ProductCart versions 1.0 through 2.0

Description The issue allows remote attackers to obtain sensitive database information due to insufficient access control of the database/EIPC.mdb file stored under the web root. This can be achieved via a direct request.

Recommendations For versions 1.0 through 2.0, consider restricting access to the database/EIPC.mdb file to prevent direct requests until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2003-1304

Produtos afetados

Productcart

Referências · 9

• 🔥 https://exploit-db.com/exploits/22868 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1304 · Nota de Segurança
• http://earlyimpact.com/pdf/ProductCart_Security_Tips.pdf · Nota
• http://securityfocus.com/bid/8112 · Nota
• http://securityfocus.com/archive/1/438189/100/200/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1304 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2003-q3/0081.html · Nota
• http://secunia.com/advisories/9195 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9816 · Nota