Unscored CVE-2005-2601 EUVD-2005-2602GHSA-f62r-m64p-2wcj

SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1) Item_Sho…

Published Aug 17, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1) Item_Show.asp or (2) search_list.asp.

References

14544 vdb-entry
http://systemsecure.org/ssforum/viewtopic.php?t=30
1014660 vdb-entry