Unrated severityNVD Advisory· Published Dec 11, 2006· Updated Jun 16, 2026

CVE-2006-6464

Description

viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a smaller total price for a shopping cart.

Affected products

Midicart Software/Midicart PHP Shopping Cart
cpe:2.3:a:midicart_software:midicart_php_shopping_cart:*:*:*:*:*:*:*:*
Midicart Software/Midicartllm-create

Patches

Vulnerability mechanics

References

cupu.us/adv/15-iFX-2006-adv-midicart-phpbackdoor.txtnvdExploitPatchURL Repurposed
www.securityfocus.com/bid/21500nvdVendor Advisory
secunia.com/advisories/23296nvd
securityreason.com/securityalert/2016nvd
www.securityfocus.com/archive/1/453912/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000