QuickEStore versions 8.2 and below suffer from a remote SQL injection vulnerability in insertorder.cfm.
c5410fa34008453ac33d052a118f2ada3d40c6a911b2fc49b1c24b11e3239300
QuickEStore version 7.9 suffers from a remote SQL injection vulnerability.
7d885e63888d8790294c3d07a4dabfd32f4d795b3664ed331d91959666b60828