Description
Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp.
References
- 9481 vdb-entry
- 3702 vdb-entry
- 3701 vdb-entry
- 20040123 QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities mailing-list
- 1008837 vdb-entry
- 3699 vdb-entry
- 3706 vdb-entry
- 10704 third-party-advisory
- 3705 vdb-entry
- http://www.s-quadra.com/advisories/Adv-20040123.txt
- qshop-multiple-sql-injection(14922) vdb-entry
- 3703 vdb-entry
- 3698 vdb-entry
- 3704 vdb-entry
- 3700 vdb-entry