PT-2002-3022 · Clickcartpro · Clickcartpro

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2310

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: ClickCartPro version 4.0

Description: The issue concerns insufficient access control on the admin user.db data file stored under the web document root in ClickCartPro, allowing remote attackers to obtain usernames and passwords on servers other than Apache.

Recommendations: For ClickCartPro version 4.0, consider restricting access to the admin user.db data file to prevent unauthorized access until a proper fix is applied. As a temporary workaround, moving the admin user.db file outside of the web document root can help minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2002-2310

Affected Products

Clickcartpro

References · 4

• 🔥 http://securiteam.com/securitynews/5DP0T0K7PY.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2310 · Security Note
• http://iss.net/security_center/static/9648.php · Note
• http://securitytracker.com/id?1004825 · Note