104 matches found
CVE-2026-41874 Hard-coded admin credentials in Quick.Cart
Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor assessed the likelihood of exploitation as very low and...
CVE-2026-23796
Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session. The vendor was notified early about this...
CVE-2026-23797
In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.7...
CVE-2026-23796 Session Fixation in Quick.Cart
Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session. The vendor was notified early about this...
CVE-2026-23797 Plaintext password display in Quick.Cart
In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.7...
CVE-2025-67683
Quick.Cart is vulnerable to reflected XSS via the sSort parameter. An attacker can craft a malicious URL which, when opened, results in arbitrary JavaScript execution in the victim’s browser. The vendor was notified early about this vulnerability, but didn't respond with the details of...
CVE-2025-67683
CVE-2025-67683 (Quick.Cart) is a reflected XSS vulnerability caused by the sSort parameter. The issue allows an attacker to craft a URL that, when opened by a victim, executes arbitrary JavaScript in the browser. Public references in the provided documents indicate that only version 6.7 was teste...
OpenSolution Quick.Cart 跨站请求伪造漏洞
OpenSolution Quick.Cart is an online store system from OpenSolution Poland. A cross-site request forgery vulnerability exists in OpenSolution Quick.Cart version 6.7, which stems from a lack of cross-site request forgery protection in the product creation functionality that could lead to the...
EUVD-2005-1590
Malware in sbrugna...
EUVD-2007-0260
Malware in sbrugna...
EUVD-2006-6373
Malware in sbrugna...
EUVD-2009-4091
Malware in sbrugna...
EUVD-2007-3130
Malware in sbrugna...
EUVD-2006-6374
Malware in sbrugna...
EUVD-2008-4123
Malware in sbrugna...
EUVD-2007-1401
Malware in sbrugna...
CVE-2020-35754
OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...
CVE-2006-6391
Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include arbitrary files via a .. dot dot in the configdbtype parameter to 1 actionsadmin/other.php and 2 actionsclient/gallery.ph...
