CVE-2002-2310 ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and pas...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kryptronic clickcartpro | = 4.0 | No fix listed |
References
- 1004825 vdb-entry
- clickcartpro-unauth-database-access-access(9648) vdb-entry
- www.securiteam.com exploit