$ 0 0 QuickEStore versions 8.2 and below suffer from a remote SQL injection vulnerability in insertorder.cfm.