CVE-2002-0943: Metalinks METACART2.SQL

Medium severity, CVSS 6.4. EPSS: 1.5% chance of exploitation in the next 30 days.

MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via a direct request for metacart.mdb.

Affected products

• Metalinks METACART2.SQL: any version

Published 2002-10-04. Last modified 2026-06-16.