CVE-2005-1502

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-11 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring parameter to search_list.php or the (2) secondgroup or (3) maingroup parameters to item_list.php.

Affected products

Midicart Software Midicart Php Shopping Cart: all versions

References

http://marc.info/?l=bugtraq&m=111533057918993&w=2
http://secunia.com/advisories/15269
http://www.hackgen.org/advisories/hackgen-2005-004.txt
http://www.osvdb.org/16173
http://www.osvdb.org/16174
http://www.securityfocus.com/bid/13516
http://www.securityfocus.com/bid/13517
http://www.securityfocus.com/bid/13518
https://exchange.xforce.ibmcloud.com/vulnerabilities/20427
http://marc.info/?l=bugtraq&m=111533057918993&w=2
http://secunia.com/advisories/15269
http://www.hackgen.org/advisories/hackgen-2005-004.txt

Get alerted when CVE-2005-1502 or the next vulnerability affects your stack