CVE-2005-2601: Undefined Security Weakness

SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the codeno parameter to 1 ItemShow.asp or 2 searchlist.asp...

CVE-2005-1503: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 searchstring parameter to searchlist.php, the 2 maingroup or 3 secondgroup parameters to itemlist.php, or 4 codeno parameter to itemshow.php...