CVE-2002-1798

Critical

Published: 31/12/2002(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

MidiCart PHP, PHP Plus, and PHP Maxi allow remote attackers to upload arbitrary PHP files via a direct request to admin/upload.php or access sensitive information via a direct request to admin/credit_card_info.php.

Risk Assessment

Attackers can exploit these vulnerabilities to upload malicious files and steal credit card information, posing a serious threat to user data security.

Recommendation

It is recommended to secure access to administrative files and implement appropriate authorization and validation mechanisms for uploaded files.

Original NVD description (English source)

MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admin/credit_card_info.php.