CVE-2005-1503

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) searchstring parameter to search_list.php, the (2) maingroup or (3) secondgroup parameters to item_list.php, or (4) code_no parameter to item_show.php.

Published 2005-05-11. Last modified 2026-06-16.