CVE-2006-2948
A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information.
Date published : 2006-06-12
http://www.securityfocus.com/bid/5597
http://www.securityfocus.com/archive/1/436257/100/0/threaded