National Vulnerability Database (CVE-2002-1798)

National Cyber-Alert System Vulnerability Summary: CVE-2002-1798
Orirignal release date: 2002-12-31 Source: US-CERT/NIST ### Overview MidiCart PHP 1 allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admin/credit_card_info.php. ### Impact CVSS Severity: 6.7 (Medium) Range: remote Authentication: access Impact Type: conf,int ### Reference to Advisories, Solutions, and Tools External Source: BUGTRAQ Name: 20021002 Multiple Web Security Holes Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html External Source: BID Name: 5851 Hyperlink: http://www.securityfocus.com/bid/5851 External Source: BID Name: 5855 Hyperlink: http://www.securityfocus.com/bid/5855 External Source: XF Name: midicart-php-access-upload(10306) Hyperlink: http://www.iss.net/security_center/static/10306.php ### Vulnerable Software and Vendor Midicart PHP (Coxco Support) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1798