Quadcomm Q-Shop vulnerabilities
5 known vulnerabilities affecting quadcomm/q-shop.
Total CVEs
5
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2006-4852P3HIGHCVSS 7.5PoCv3.52006-09-19
CVE-2006-4852 [HIGH] CVE-2006-4852: SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute
SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL commands via the OrderBy parameter.
nvd
CVE-2008-6258P3HIGHCVSS 7.5PoCv3.02009-02-24
CVE-2008-6258 [HIGH] CVE-2008-6258: SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote
SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the (1) UserID and (2) Pwd parameters. NOTE: this might be related to CVE-2004-2108.
nvd
CVE-2008-6259P4MEDIUMCVSS 4.3PoC≤ 3.02009-02-24
CVE-2008-6259 [MEDIUM] CWE-79 CVE-2008-6259: Cross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier,
Cross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the srkeys parameter.
nvd
CVE-2004-2108P3HIGHCVSS 7.5v2.0v2.1+2 more2004-12-31
CVE-2004-2108 [HIGH] CVE-2004-2108: Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrar
Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp.
nvd
CVE-2004-2109P4MEDIUMCVSS 6.8v2.0v2.1+2 more2004-12-31
CVE-2004-2109 [MEDIUM] CVE-2004-2109: Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-S
Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL.
nvd