Unrated severityNVD Advisory· Published Aug 17, 2005· Updated Jun 16, 2026
CVE-2005-2601
CVE-2005-2601
Description
SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1) Item_Show.asp or (2) search_list.asp.
Affected products
1- cpe:2.3:a:midicart_software:midicart_php_shopping_cart:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- securitytracker.com/idnvdExploitVendor Advisory
- systemsecure.org/ssforum/viewtopic.phpnvdExploitVendor Advisory
- www.securityfocus.com/bid/14544nvd
News mentions
0No linked articles in our index yet.