Midicart Software's vulnerability profile centers on a narrow portfolio of e-commerce shopping-cart applications spanning PHP and ASP platforms, which despite modest overall prevalence occupy a niche but persistent role in legacy online retail deployments. The product line's recurring weaknesses fall into broad input-handling and application-logic categories, and vulnerabilities affecting these carts frequently acquire public exploit code, reflecting their exposure as internet-facing transaction systems. Defenders managing legacy web applications should monitor this vendor's advisories and prioritize patching of exposed cart instances; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Midicart Software over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2005-1503HIGH Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) searchstring parameter to search_list.php, | May 11, 2005 | 7.5 | 29 | NO | YES |
CVE-2006-6209HIGH Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) id2006quant par | Dec 1, 2006 | 7.5 | 28 | NO | YES |
CVE-2005-2601HIGH SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1) Item_Show.asp or (2) search_list.asp. | Aug 17, 2005 | 7.5 | 19 | NO | NO |
CVE-2005-1501HIGH MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_list.php, (2) item_list.php, or (3) item_show.php, which revea | May 11, 2005 | 7.5 | 19 | NO | NO |
CVE-2005-1502MEDIUM Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring parameter to search_l | May 11, 2005 | 6.8 | 19 | NO | NO |
CVE-2006-6463MEDIUM Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and possibly other files, to the images/ direc | Dec 11, 2006 | 6.5 | 17 | NO | NO |
CVE-2006-6464MEDIUM viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a smaller total price for a shopping cart. | Dec 11, 2006 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Midicart Software.
Media articles that mention a CVE ID that affects a product developed by Midicart Software — matched by CVE ID, not by vendor name.