← Database

CVE-2004-2108

HIGH CVSS: 7.5 Published: 2004-12-31 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp.

Affected Platforms

Quadcomm Q-Shop

Weakness Type

NVD-CWE-Other

References