Lucene search

K
nvd[email protected]NVD:CVE-1999-0607
HistoryApr 20, 1999 - 4:00 a.m.

CVE-1999-0607

1999-04-2004:00:00
web.nvd.nist.gov
5

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

75.7%

quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.

Affected configurations

Nvd
Node
i-softquikstore
VendorProductVersionCPE
i-softquikstore*cpe:2.3:a:i-soft:quikstore:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

75.7%

Related for NVD:CVE-1999-0607