← Database

CVE-2002-1798

CRITICAL CVSS: 9.1 Published: 2002-12-31 Modified: 2026-06-16

Description

MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admin/credit_card_info.php.

Affected Platforms

Midicart Midicart Php PlusMidicart Midicart PhpMidicart Midicart Php Maxi

Weakness Type

CWE-425

References