⌘ + K

Quadcomm

Dashboard / Vendors

Products: 1

Vulnerabilities: 5

Known Exploited: 0

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Vulnerabilities

100806040200

JanFebMarAprMayJunJulAugSepOctNovDec

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Products Security index

Actions

Q-shop

Application

Items Per Page

Vulnerabilities

CVE-2008-6258

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the (1) UserID and (2) Pwd parameters. NOTE: this might be related to CVE-2004-2108.

Last Modified: Apr 23, 2026

Published: Feb 24, 2009

CVE-2008-6259

Cross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the srkeys parameter.

Last Modified: Apr 23, 2026

Published: Feb 24, 2009

CVE-2006-4852

SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL commands via the OrderBy parameter.

Last Modified: Apr 16, 2026

Published: Sep 19, 2006

CVE-2004-2108

Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp.

Last Modified: Apr 16, 2026

Published: Dec 31, 2004

CVE-2004-2109

Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL.

Last Modified: Apr 16, 2026

Published: Dec 31, 2004

Items Per Page