CVE-2002-1432: Coxco Support A-Cart

Medium severity, CVSS 5.0. EPSS: 7.8% chance of exploitation in the next 30 days.

MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.

Affected products

• Coxco Support A-Cart: version 2.0 only
• Coxco Support Metacart: version 2.sql only
• Coxco Support Midicart Asp: any version
• Coxco Support Midicart Asp Maxi: any version
• Coxco Support Midicart Asp Plus: any version
• Coxco Support Salescart-Pro: any version
• Coxco Support Salescart-Std: any version

Published 2003-04-11. Last modified 2026-06-16.