Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2002-1798 Details
Description
MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admin/credit_card_info.php.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html | CVE | Broken LinkExploit |
| http://www.iss.net/security_center/static/10306.php | CVE | Broken Link |
| http://www.securityfocus.com/bid/5851 | CVE | Broken LinkExploitThird Party AdvisoryVDB Entry |
| http://www.securityfocus.com/bid/5855 | CVE | Broken LinkExploitThird Party AdvisoryVDB Entry |
| http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html | [email protected] | Broken LinkExploit |
| http://www.iss.net/security_center/static/10306.php | [email protected] | Broken Link |
| http://www.securityfocus.com/bid/5851 | [email protected] | Broken LinkExploitThird Party AdvisoryVDB Entry |
| http://www.securityfocus.com/bid/5855 | [email protected] | Broken LinkExploitThird Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-425 | Direct Request ('Forced Browsing') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| midicart midicart php | All versions |
CPE
Remediation
| |
| midicart midicart php maxi | All versions |
CPE
Remediation
| |
| midicart midicart php plus | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 16, 2026 | [email protected] | |
| Nov 20, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jan 25, 2024 | Reanalysis | [email protected] |
| Jul 8, 2005 | Initial Analysis | [email protected] |