CVE-2005-2601: Undefined Security Weakness

SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the codeno parameter to 1 ItemShow.asp or 2 searchlist.asp...