2.5.beta

DATE	CVE	VULNERABILITY TITLE	RISK
2004-12-31	CVE-2004-2109	Cross-Site Scripting vulnerability in QuadComm Q-Shop Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL. network quadcomm	6.8
2004-12-31	CVE-2004-2108	SQL Injection vulnerability in QuadComm Q-Shop Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp. network low complexity quadcomm	7.5