Open Solution Quick.cart — known CVE vulnerabilities

Every CVE whose affected-product data names Open Solution Quick.cart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2007-3138 — CVSS 7.5 (high): Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute…
• CVE-2007-1407 — CVSS 7.5 (high): Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and attack vectors, related to a "low critical exploit."
• CVE-2005-1588 — CVSS 7.5 (high): SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL commands via the iCategory…
• CVE-2006-6391 — CVSS 6.8 (medium): Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is…
• CVE-2006-6390 — CVSS 6.8 (medium): Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is…
• CVE-2007-3139 — CVSS 6.8 (medium): config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the…
• CVE-2005-1587 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject arbitrary web script or HTML…