Vulnerabilities

TI-2007-03810 CVE-2007-3933 · GHSA-8fvf-2jw2-pr87

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows…

LOW 35

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the CFTOKEN parameter, a different vector than CVE-2006-2053.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01043 Published 2007-07-21 No fix listed CWE-89

TI-2006-01998 CVE-2006-2053 · GHSA-crmg-jvhp-7x9p

Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote…

LOW 32

Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the OrderID parameter in (a) shipping.cfm and (b) checkout.cfm, (2) ItemID parameter…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01637 Published 2006-04-26 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows…

Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote…