MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
| Software | From | Fixed in |
|---|---|---|
| coxco_support / midicart_asp | - | - |
| coxco_support / salescart-std | - | - |
| coxco_support / salescart-pro | - | - |
| coxco_support / a-cart | 2.0 | 2.0.x |
| coxco_support / midicart_asp_maxi | - | - |
| coxco_support / metacart | 2.sql | 2.sql.x |
| coxco_support / midicart_asp_plus | - | - |