Vulnerabilities > CVE-2006-2948 - Unspecified vulnerability in Alan Ward A-Cart

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
alan-ward

Summary

A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information.

Vulnerable Configurations

Part Description Count
Application
Alan_Ward
1