EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information via a direct request.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Productcart | Early_impact | 1.1 (including) | 1.1 (including) |
| Productcart | Early_impact | 1.2 (including) | 1.2 (including) |
| Productcart | Early_impact | 1.3 (including) | 1.3 (including) |
| Productcart | Early_impact | 1.4 (including) | 1.4 (including) |
| Productcart | Early_impact | 1.5 (including) | 1.5 (including) |
| Productcart | Early_impact | 1.6_b (including) | 1.6_b (including) |
| Productcart | Early_impact | 1.6_b001 (including) | 1.6_b001 (including) |
| Productcart | Early_impact | 1.6_b002 (including) | 1.6_b002 (including) |
| Productcart | Early_impact | 1.6_b003 (including) | 1.6_b003 (including) |
| Productcart | Early_impact | 1.6_br (including) | 1.6_br (including) |
| Productcart | Early_impact | 1.6_br001 (including) | 1.6_br001 (including) |
| Productcart | Early_impact | 1.6_br003 (including) | 1.6_br003 (including) |
| Productcart | Early_impact | 1.6b (including) | 1.6b (including) |
| Productcart | Early_impact | 1.6b001 (including) | 1.6b001 (including) |
| Productcart | Early_impact | 1.6b002 (including) | 1.6b002 (including) |
| Productcart | Early_impact | 1.6b003 (including) | 1.6b003 (including) |
| Productcart | Early_impact | 1.6br (including) | 1.6br (including) |
| Productcart | Early_impact | 1.6br001 (including) | 1.6br001 (including) |
| Productcart | Early_impact | 1.6br003 (including) | 1.6br003 (including) |
| Productcart | Early_impact | 1.5002 (including) | 1.5002 (including) |
| Productcart | Early_impact | 1.5003 (including) | 1.5003 (including) |
| Productcart | Early_impact | 1.5003r (including) | 1.5003r (including) |
| Productcart | Early_impact | 1.5004 (including) | 1.5004 (including) |
| Productcart | Early_impact | 1.6002 (including) | 1.6002 (including) |
| Productcart | Early_impact | 1.6003 (including) | 1.6003 (including) |
| Productcart | Early_impact | 2 (including) | 2 (including) |
| Productcart | Early_impact | 2.0 (including) | 2.0 (including) |