PT-2005-2499 · Midicart · Midicart Php Shopping Cart

Exoduks · Published 2005-05-11 · Updated 2017-07-11 · CVE-2005-1503

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MidiCart PHP Shopping Cart (affected versions not specified)

Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerable parameters include the searchstring parameter to "search list.php", the maingroup or secondgroup parameters to "item list.php", and the code no parameter to "item show.php".

Recommendations For MidiCart PHP Shopping Cart, consider restricting access to the "search list.php", "item list.php", and "item show.php" scripts until a fix is available. As a temporary workaround, avoid using the searchstring, maingroup, secondgroup, and code no parameters in their respective scripts until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-1503

Affected Products

Midicart Php Shopping Cart

References · 13

• 🔥 https://exploit-db.com/exploits/25614 · Exploit
• 🔥 http://securityfocus.com/bid/13514 · Exploit
• 🔥 http://securityfocus.com/bid/13513 · Exploit
• 🔥 http://securityfocus.com/bid/13515 · Exploit
• 🔥 http://securityfocus.com/bid/13512 · Exploit
• 🔥 http://hackgen.org/advisories/hackgen-2005-004.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1503 · Security Note
• http://osvdb.org/16177 · Note
• http://marc.info/?l=bugtraq&m=111533057918993&w=2 · Note
• http://secunia.com/advisories/15269 · Note
• http://osvdb.org/16176 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20428 · Note
• http://osvdb.org/16175 · Note