PT-2003-2249 · Early Impact · Productcart

Published 2003-12-31 · Updated 2018-10-19 · CVE-2003-1304

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EarlyImpact ProductCart versions 1.0 through 2.0

Description The issue allows remote attackers to obtain sensitive database information due to insufficient access control of the database/EIPC.mdb file stored under the web root. This can be achieved via a direct request.

Recommendations For versions 1.0 through 2.0, consider restricting access to the database/EIPC.mdb file to prevent direct requests until a proper fix is applied.

Exploit

Fix

Related Identifiers

CVE-2003-1304

Affected Products

Productcart

References · 9

• 🔥 https://exploit-db.com/exploits/22868 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1304 · Security Note
• http://earlyimpact.com/pdf/ProductCart_Security_Tips.pdf · Note
• http://securityfocus.com/bid/8112 · Note
• http://securityfocus.com/archive/1/438189/100/200/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1304 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2003-q3/0081.html · Note
• http://secunia.com/advisories/9195 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9816 · Note