CVE-2004-2108

Description

Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/14922

http://www.osvdb.org/3706

http://www.osvdb.org/3705

http://www.osvdb.org/3704

http://www.osvdb.org/3703

http://www.osvdb.org/3702

http://www.osvdb.org/3701

http://www.osvdb.org/3700

http://www.osvdb.org/3699

http://www.osvdb.org/3698

http://securitytracker.com/alerts/2004/Jan/1008837.html

http://secunia.com/advisories/10704

http://marc.info/?l=bugtraq&m=107488132208229&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS