Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL.
References
- 9480 vdb-entry
- 3697 vdb-entry
- 20040123 QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities mailing-list
- 10704 third-party-advisory
- 3696 vdb-entry
- qshop-url-xss(14923) vdb-entry