CVE-2004-2109

CVE-2004-2109 describes multiple cross-site scripting (XSS) vulnerabilities in the Q-Shop application, specifically in the components (1) imagezoom.asp and (2) recommend.asp. The attacker can leverage these flaws to execute arbitrary JavaScript in a victim’s browser and potentially steal the user...

CVE-2004-2109

Multiple cross-site scripting XSS vulnerabilities in 1 imagezoom.asp or 2 recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL...

CVE-2002-2109

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTPREFERER check and conduct unauthorized activities via 1 a blank referer, 2 a spoofed referer with a trusted domain/URL after the beginning of the referer, or 3 a spoofed referer with a trusted domain/URL in the beginni...