CVE

Id
10535  
CVE No.
CVE-2004-2109  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL.  
Phase
Assigned (20050527)  
Votes
None (candidate not yet proposed)  
Comments