1. CVE-Search
  2. CVE-2003-1304
ID CVE-2003-1304
Summary EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information via a direct request.
References
Vulnerable Configurations
  • cpe:2.3:a:early_impact:productcart:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.4:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.5:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6_b:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6_b:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6_b001:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6_b001:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6_b002:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6_b002:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6_b003:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6_b003:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6_br:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6_br:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6_br001:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6_br001:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6_br003:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6_br003:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6b:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6b:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6b001:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6b001:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6b002:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6b002:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6b003:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6b003:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6br:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6br:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6br001:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6br001:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6br003:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6br003:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.5002:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.5002:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.5003:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.5003:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.5003r:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.5003r:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.5004:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.5004:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6002:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6002:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:1.6003:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:1.6003:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:2:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:2:*:*:*:*:*:*:*
  • cpe:2.3:a:early_impact:productcart:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:early_impact:productcart:2.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 19-10-2018 - 15:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 8112
bugtraq 20060622 productcart soltan_defacer
fulldisc 20030705 [Vulnerability] : ProductCart database file can be downloaded remotely
misc http://www.earlyimpact.com/pdf/ProductCart_Security_Tips.pdf
secunia 9195
xf shopping-cart-database-access(9816)
Last major update 19-10-2018 - 15:29
Published 31-12-2003 - 05:00
Last modified 19-10-2018 - 15:29
Back to Top