CVE-2002-1432
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote...
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
Exploit likelihood
What each source reports
NVD Score used
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
- Record
CVE-2002-1432- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
- Record
CVE-2002-1432- Updated
- 2026-11-02
EUVDEUVD-2002-1415 No score
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
- Record
EUVD-2002-1415- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hrm4-7fcp-grwc No score
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote...
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
- Record
GHSA-hrm4-7fcp-grwc- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Midicart ASP - Remote Customer Information Retrieval | 2002-08-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1432 is a medium vulnerability (CVSS 5.0) in Coxco Support A-cart, published March 18, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.77%, the 94th percentile. No source names a fixed version.