Midicart Software

midicart_software

6 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Midicart Php Shopping Cart

midicart_php_shopping_cart

Midicart Asp Plus Shopping Cart

midicart_asp_plus_shopping_cart

Midicart Asp Shopping Cart

midicart_asp_shopping_cart

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-6464 1Midicart Software 1Midicart Php Shopping Cart Apr 23, 2026 Dec 11, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a smaller total price for a shopping cart.
CVE-2006-6463 1Midicart Software 1Midicart Php Shopping Cart Apr 23, 2026 Dec 11, 2006 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and possibly other files, to the images/ directory under the web root.
CVE-2006-6209 1Midicart Software 2Midicart Asp Plus Shopping Cart Midicart Asp Shopping Cart Apr 23, 2026 Dec 1, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) id2006quant parameter to (a) item_show.asp, or the (2)...Show more Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) id2006quant parameter to (a) item_show.asp, or the (2) maingroup or (3) secondgroup parameter to (b) item_list.asp. NOTE: the code_no parameter to Item_Show.asp is covered by CVE-2005-2601.Show less
CVE-2005-2601 1Midicart Software 1Midicart Php Shopping Cart Apr 16, 2026 Aug 17, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1) Item_Show.asp or (2) search_list.asp.
CVE-2005-1502 1Midicart Software 1Midicart Php Shopping Cart Apr 16, 2026 May 11, 2005 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring parameter to search_list.php or the (2) secondgroup or (3) ma...Show more Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring parameter to search_list.php or the (2) secondgroup or (3) maingroup parameters to item_list.php.Show less
CVE-2005-1501 1Midicart Software 1Midicart Php Shopping Cart Apr 16, 2026 May 11, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_list.php, (2) item_list.php, or (3) item_show.php, which reveal the path in a PHP error message.