Description
A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information.
References
- 1005171 vdb-entry
- 20060607 bug on showwich.asp mailing-list
- http://www.securiteam.com/windowsntfocus/5JP081F8AY.html
- 5597 vdb-entry
- ADV-2006-2207 vdb-entry
- 20508 third-party-advisory