NVD

Id
72485  
Name
CVE-2004-2108  
Description
Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-2108  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
374018 72485 CVE-2004-2108 20040123 QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities  View
374019 72485 CVE-2004-2108 1008837  View
374020 72485 CVE-2004-2108 http://www.s-quadra.com/advisories/Adv-20040123.txt  View
374021 72485 CVE-2004-2108 9481  View
374022 72485 CVE-2004-2108 qshop-multiple-sql-injection(14922)  View

Related JVN