Midicart Php Shopping Cart
Approved changes feed: RSS · Atom
cpe:2.3:a:midicart_software:midicart_php_shopping_cart:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Midicart Software (194cd143-2e6f-520e-9d7e-c64d599a73ea) |
|---|---|
| Product | Midicart Php Shopping Cart (d183a974-af2e-5619-95b0-b5beb6da5ba2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-6464 |
vulnerable | 2026-06-08 04:49:28.926046 |
Details available
viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a smaller total price for a shopping cart.
Published: 2006-12-11T18:00:00.000Z
Updated: 2024-08-07T20:26:46.605Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6463 |
vulnerable | 2026-06-08 04:49:28.925641 |
Details available
Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and possibly other files, to the images/ directory under the web root.
Published: 2006-12-11T18:00:00.000Z
Updated: 2024-08-07T20:26:46.525Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2601 |
vulnerable | 2026-06-08 04:48:29.774304 |
Details available
SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1) Item_Show.asp or (2) search_list.asp.
Published: 2005-08-17T04:00:00.000Z
Updated: 2024-08-07T22:30:01.806Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1503 |
not_vulnerable | 2026-06-08 04:48:26.797255 |
Details available
Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) searchstring parameter to search_list.php, the (2) maingroup or (3) secondgroup parameters to item_list.php, or (4) code_no parameter to item_show.php.
Published: 2005-05-11T04:00:00.000Z
Updated: 2024-08-07T21:51:50.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1502 |
vulnerable | 2026-06-08 04:48:26.796887 |
Details available
Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring parameter to search_list.php or the (2) secondgroup or (3) maingroup parameters to item_list.php.
Published: 2005-05-11T04:00:00.000Z
Updated: 2024-08-07T21:51:50.419Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1501 |
vulnerable | 2026-06-08 04:48:26.796466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.