CVE-2006-6209 - CVE House
Back to Database
Status published High CVE-2006-6209

Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and...

Vulnerability Description

Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) id2006quant parameter to (a) item_show.asp, or the (2) maingroup or (3) secondgroup parameter to (b) item_list.asp. NOTE: the code_no parameter to Item_Show.asp is covered by CVE-2005-2601.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6209

Credits & Attribution

No credits recorded in the NVD database.

References

More from midicart software

View All →
CVE-2006-6464
viewcart in Midicart accepts negative numbers in the Qty (quantity)...
Medium 5
CVE-2006-6463
Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote...
Medium 6.5
CVE-2005-2601
SQL injection vulnerability in MidiCart allows remote attackers to execute...
High 7.5
CVE-2005-1502
Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows...
Medium 6.8
CVE-2005-1501
MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive...
High 7.5

Affected Vendor

midicart software

View all reports →

Affected Software

midicart asp plus shopping cart, midicart asp shopping cart
Vulnerable Versions:
Unknown

Timeline

Official Publish: December 1st, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.