CVE-2004-2109

Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and…

published May 27, 2005

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02185 · 82.1th percentile
Published
2005-05-27T04:00Z
EPSS history
Timeline
  • 27 MAY 04:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and…
    cvelistv5