#Aria-Security Team Advisory
# For English > 
# For Persian > 
#-----------------------------------------------------------
#Software: MidiCart ASP Plus Shopping Cart
#Method: SQL Injection And Cross Site Scripting
#
#PoC:
#http://target/path/item_show.asp?code_no=[SQL Injection] 
#http://target/path/item_show.asp?id2006quant=[SQL INJECTION] 
#http://target/path/item_list.asp?maingroup=[SQL INJECTION] 
#http://target/path/item_list.asp?maingroup=Something&secondgroup=[SQL INJECTION] 
#
#Contact: Advisory@aria-security.net