Cross-Site Scripting (XSS) Vulnerabilities in Q-Shop's imagezoom.asp and recommend.asp

CVE-2004-2109 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL.

Learn more about our Cis Benchmark Audit For Zoom.