CVE:CVE-2002-1432
CNNVD:CNNVD-200304-112
Midicart ASP是一款Coxco支持的商业性质的电子商务解决方案，可使用在Microsoft Windows操作系统下。
Midicart ASP没有对midicart.mdb数据库文件进行充分的访问控制设置，远程攻击者可以利用这个漏洞下载数据库文件获得客户信息。
默认安装下，Midicart ASP的数据库文件midicart.mdb允许任意用户访问，远程攻击者可以直接请求获得这个midicart.mdb文件，此文件包含客户敏感信息，包括客户名字、地址和信用卡信息。
solution:Upgrade coxco_support a-cart to a higher version than 2.0,and avoid the version 2.0; Upgrade coxco_support metacart to a higher version than 2.sql,and avoid the version 2.sql; Upgrade coxco_support midicart_asp to a higher version than *; Upgrade coxco_support midicart_asp_maxi to a higher version than *; Upgrade coxco_support midicart_asp_plus to a higher version than *; Upgrade coxco_support salescart-pro to a higher version than *; Upgrade coxco_support salescart-std to a higher version than *