Midicart Software Midicart Php Shopping Cart — known CVE vulnerabilities

Every CVE whose affected-product data names Midicart Software Midicart Php Shopping Cart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2005-1501 — CVSS 7.5 (high): MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_list.php, (2)…
• CVE-2005-2601 — CVSS 7.5 (high): SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1)…
• CVE-2005-1502 — CVSS 6.8 (medium): Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2006-6463 — CVSS 6.5 (medium): Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and…
• CVE-2006-6464 — CVSS 5.0 (medium): viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a smaller total price…