CVE:CVE-2006-6209
CNNVD:CNNVD-200611-477
MidiCart ASP Shopping Cart和ASP Plus Shopping Cart存在多个SQL注入漏洞，远程攻击者可以通过传给(a)item_show.asp的(1)id2006quant参数，或者传给(b)item_list.asp的(2)maingroup或(3)secondgroup参数，来执行任意SQL命令。
solution:Upgrade midicart_software midicart_asp_plus_shopping_cart to a higher version than *; Upgrade midicart_software midicart_asp_shopping_cart to a higher version than *