87 matches found
CVE-2020-35754
OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...
CVE-2020-35754
CVE-2020-35754 affects OpenSolution Quick.CMS (< 6.7) and Quick.Cart (
Opensolution Quick.Cart and Opensolution Quick.Cms Injection Vulnerabilities
Opensolution Quick.Cart and Opensolution Quick.Cms are both products of Opensolution Poland.Opensolution Quick.Cart is a website builder for building shopping cart platforms.Opensolution Quick.Cms is a website builder for building text management platforms. Cms is a website builder for building...
CVE-2020-35754: Improper Control of Generation of Code
OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...
OpenSolution Quick.Cart 'admin.php' Cross-Site Scripting Vulnerability
OpenSolution Quick.Cart is a PHP-based open source e-commerce software from OpenSolution Poland. The software supports engine optimization , module extensions and so on. A cross-site scripting vulnerability exists in OpenSolution Quick.Cart version 6.6. An attacker can exploit the vulnerability t...
QuikCart 6.6 - CSRF Privilege Escalation Exploit
Exploit for php platform in category web applications Title : QuikCart 6.6 - CSRF Privilege Escalation Exploit Author : ZwX Vendor : http://opensolution.org/ Download Link : http://opensolution.org/download/home.html?sFile=Quick.Cartv6.6.zip Version : 6.6 Security Level : Hight Tested Os : Window...
OpenSolution QuickCart Index.PHP Local File Containment Vulnerability
OpenSolution Quick.Cart is a PHP-based open source e-commerce software from OpenSolution Poland. The software supports engine optimization , module extensions and so on. A local file inclusion vulnerability exists in OpenSolution Quick.Cart 2.2 and earlier versions, which stems from the program...
Quick.Cms 5.0 / Quick.Cart 6.0 Cross Site Scripting Vulnerability
Quick.Cms version 5.0 and Quick.Cart version 6.0 suffer from a cross site scripting vulnerability. Product: Quick.Cms, Quick.Cart Vendor: OpenSolution team Vulnerable Versions: Quick.Cms 5.0, Quick.Cart 6.0 and probably prior Tested Version: Quick.Cms 5.0, Quick.Cart 6.0 Vendor Notification:...
Cross-Site Scripting (XSS) vulnerability in Quick.Cms and Quick.Cart
Advisory ID: HTB23135 Product: Quick.Cms, Quick.Cart Vendor: OpenSolution team Vulnerable Versions: Quick.Cms 5.0, Quick.Cart 6.0 and probably prior Tested Version: Quick.Cms 5.0, Quick.Cart 6.0 Vendor Notification: December 19, 2012 Vendor Patch: December 20, 2012 Public Disclosure: January 9,...
Quick.Cms 5.0 / Quick.Cart 6.0 Cross Site Scripting
Advisory ID: HTB23135 Product: Quick.Cms, Quick.Cart Vendor: OpenSolution team Vulnerable Versions: Quick.Cms 5.0, Quick.Cart 6.0 and probably prior Tested Version: Quick.Cms 5.0, Quick.Cart 6.0 Vendor Notification: December 19, 2012 Vendor Patch: December 20, 2012 Public Disclosure: January 9,...
Cross-Site Scripting (XSS) vulnerability in Quick.Cms and Quick.Cart
High-Tech Bridge Security Research Lab discovered XSS vulnerability in Quick.Cms and Quick.Cart - two products developed by OpenSolution team, which can be exploited to perform cross-site scripting attacks. 1. Cross-Site Scripting XSS vulnerability in Quick.Cms and Quick.Cart: CVE-2012-6430 The...
Quick.Cart / Quick.CMS XSRF
Systems Affected: Quick.Cart 3.4 other versions untested, Quick.CMS 2.4 other versions untested Severity: Medium Vendor: http://opensolution.org/ Author: Alice Kaerast 0. Timeline 25-10-2009 Vulnerability discovered 26-10-2009 Vendor contacted 23-11-2009 No response from vendor, report published ...
CVE-2008-4139
Cross-site scripting XSS vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string...
Cross site scripting
Cross-site scripting XSS vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string...
[NOBYTES.COM: #13] Quick.Cart v3.1 Freeware - Cross Site Scripting
Application: Quick.Cart v3.1 Freeware Authors Site: http://opensolution.org/quick.cart,en,9.html +--------------------------------------------------------------+ XSS: http://www.victim.com/admin.php?"scriptalertdocument.cookie/script" +-Notes:-----------------------------------------------------+...
CVE-2008-4139
Cross-site scripting XSS vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string...
CVE-2008-4139
CVE-2008-4139 describes a Cross-site Scripting (XSS) vulnerability in OpenSolution Quick.Cms.Lite 2.1, specifically in admin.php, where an attacker can inject arbitrary script/HTML via the query string. The available sources confirm the affected component but do not provide details on root cause ...
CVE-2008-4139: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string...