CVE-1999-0607
MediumExploitation Probability (EPSS)
Elevated risk67th percentile - higher than 67% of all known CVEs
Summary
quikstore.cgi in the QuikStore shopping cart stores the quikstore.cfg file under the web document root with insufficient access control, allowing remote attackers to obtain the cleartext administrator password and gain privileges.
Risk Assessment
Improper protection of the configuration file may lead to unauthorized users taking control of the system, posing a serious security threat to the organization.
Recommendation
It is recommended to move the quikstore.cfg file outside the web document root and implement appropriate access control mechanisms.
Original NVD description (English source)
quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.