CVE-2006-6464

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a smaller total price for a shopping cart.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://cupu.us/adv/15-iFX-2006-adv-midicart-phpbackdoor.txtExploit, Patch, URL Repurposed
http://secunia.com/advisories/23296
http://securityreason.com/securityalert/2016
http://www.securityfocus.com/archive/1/453912/100/0/threaded
http://www.securityfocus.com/bid/21500Vendor Advisory
http://cupu.us/adv/15-iFX-2006-adv-midicart-phpbackdoor.txtExploit, Patch, URL Repurposed
http://secunia.com/advisories/23296
http://securityreason.com/securityalert/2016
http://www.securityfocus.com/archive/1/453912/100/0/threaded
http://www.securityfocus.com/bid/21500Vendor Advisory

Timeline

Published: Dec 11, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-64656.5Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local CVE-2006-64666.8Multiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary we CVE-2006-64675.8Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not properly restrict CVE-2006-64685.8Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qu CVE-2006-64695.8Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not block the postgres CVE-2006-647010.0The SNMP Agent in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 returns CVE-2006-647110.0Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 use weak permissions for CVE-2006-647210.0The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 co CVE-2006-647310.0Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before CVE-2006-64744.6Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH e CVE-2006-64757.1FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a deni CVE-2006-64762.4FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces),