Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Midicart ASP远程客户信息数据库文件泄露漏洞
Vulnerability Description
Midicart ASP是一款Coxco支持的商业性质的电子商务解决方案，可使用在Microsoft Windows操作系统下。 Midicart ASP没有对midicart.mdb数据库文件进行充分的访问控制设置，远程攻击者可以利用这个漏洞下载数据库文件获得客户信息。 默认安装下，Midicart ASP的数据库文件midicart.mdb允许任意用户访问，远程攻击者可以直接请求获得这个midicart.mdb文件，此文件包含客户敏感信息，包括客户名字、地址和信用卡信息。
CVSS Information
N/A
Vulnerability Type
N/A