Open Solution

10 CVEs across 2 Open Solution products. Browse Open Solution vulnerabilities, severities, and proof-of-concept exploits.

Open Solution products with known CVEs

ProductCVEs
Quick.cart7
Quick.forum3
Open Solution CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-31392007-06-08config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login acti…
CVE-2007-31382007-06-08Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute arbitrary local files…
CVE-2007-14072007-03-10Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and attack vectors, related to a "low critical exploit."
CVE-2006-63912006-12-08Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote a…
CVE-2006-63902006-12-08Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote a…
CVE-2005-15872005-05-14Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject arbitrary web script or HTML via the sWord paramet…
CVE-2005-15862005-05-14Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, whi…
CVE-2005-15842005-05-14Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject arbitrary web script or HTML via the topic field…
CVE-2005-15882005-05-11SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL commands via the iCategory parameter. NOTE: the…
CVE-2005-15852005-05-11Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) iCategory or (2) page paramete…