CartWeaver suffers from a remote SQL injection vulnerability in Details.cfm.
e00170692c404693cce545361a29fc63f06a38e0b39cb3910262444fa2e7aade
QuickEStore versions 8.2 and below suffer from a remote SQL injection vulnerability in insertorder.cfm.
c5410fa34008453ac33d052a118f2ada3d40c6a911b2fc49b1c24b11e3239300