CVE-2002-1798

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admin/credit_card_info.php.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html
Broken Link
Exploit
http://www.iss.net/security_center/static/10306.php
Broken Link
http://www.securityfocus.com/bid/5851
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/5855
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html
Broken Link
Exploit
http://www.iss.net/security_center/static/10306.php
Broken Link
http://www.securityfocus.com/bid/5851
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/5855
Broken Link
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:midicart:midicart_php:-:*:*:*:*:*:*:*

cpe:2.3:a:midicart:midicart_php_maxi:-:*:*:*:*:*:*:*

cpe:2.3:a:midicart:midicart_php_plus:-:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.06104

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-425

Связанные уязвимости

GHSA-xj93-8hff-x47c