Midicart Software Midicart Php Shopping Cart
6 CVEs affecting Midicart Software Midicart Php Shopping Cart. Latest disclosed: 2006-12-11. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-6464 | | 2006-12-11 | viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a smaller total price for a shopping cart. | |
CVE-2006-6463 | | 2006-12-11 | Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and possibly other files… | |
CVE-2005-2601 | | 2005-08-17 | SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1) Item_Show.asp or (2) search_… | |
CVE-2005-1503 | | 2005-05-11 | Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) searchstring paramete… | |
CVE-2005-1502 | | 2005-05-11 | Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring… | |
CVE-2005-1501 | | 2005-05-11 | MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_list.php, (2) item_list.php, or (3) item_… |