Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2002-1432

EPSS 7.51% · P92
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-1432

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Midicart ASP远程客户信息数据库文件泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Midicart ASP是一款Coxco支持的商业性质的电子商务解决方案,可使用在Microsoft Windows操作系统下。 Midicart ASP没有对midicart.mdb数据库文件进行充分的访问控制设置,远程攻击者可以利用这个漏洞下载数据库文件获得客户信息。 默认安装下,Midicart ASP的数据库文件midicart.mdb允许任意用户访问,远程攻击者可以直接请求获得这个midicart.mdb文件,此文件包含客户敏感信息,包括客户名字、地址和信用卡信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-1432

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-1432

登录查看更多情报信息。

Same Patch Batch · n/a · 2003-03-18 · 96 CVEs total

CVE-2002-1503多个AFD工作目录本地缓冲区溢出漏洞
CVE-2002-1498SWServer目录遍历漏洞
CVE-2002-1492Cisco VPN客户端本地缓冲区溢出漏洞
CVE-2002-1486Trillian IRC超大消息块远程缓冲区溢出漏洞
CVE-2002-1485Trillian AIM服务拒绝(崩溃)漏洞
CVE-2002-1484DB4Web可被作为连接代理使用漏洞
CVE-2002-1483DB4Web远程文件泄露漏洞
CVE-2002-1482phpGB SQL注入漏洞
CVE-2002-1487Trillian IRC Raw消息远程拒绝服务攻击漏洞
CVE-2002-1500NetBSD IPv4多播工具缓冲区溢出漏洞
CVE-2002-1499FactoSystem Weblog多个SQL注入漏洞
CVE-2002-1504WebServer Everyone目录遍历漏洞
CVE-2002-1506Linuxconf本地环境变量缓冲区溢出漏洞。
CVE-2002-1507Unreal Tournament客户端和服务器服务拒绝漏洞
CVE-2002-1512BRU XBRU以不安全方式建立临时文件漏洞
CVE-2002-1515CoolForum远程源代码泄露漏洞
CVE-2002-1522Cooolsoft PowerFTP Server长用户名远程拒绝服务攻击漏洞
CVE-2002-1523Daniel Arenz Mini Server目录遍历漏洞
CVE-2002-1525Sun ONE Starter Kit / ASTAware SearchDisc Search Engine目录遍历漏洞
CVE-2002-1526EmuMail Email Form脚本注入漏洞

Showing top 20 of 96 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2002-1432

No comments yet


Leave a comment