CVE-2002-1798 MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admi...
CriticalCVSS 9.1
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admin/credit_card_info.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| midicart php | All versions | No fix listed |
| midicart php maxi | All versions | No fix listed |
| midicart php plus | All versions | No fix listed |
References
- 20021002 Multiple Web Security Holes broken-link exploit mailing-list
- midicart-php-access-upload(10306) broken-link vdb-entry
- 5851 broken-link exploit third-party-advisory vdb-entry
- 5855 broken-link exploit third-party-advisory vdb-entry