Skip to content
Noroxi

open solution records

10 published records for vendor open solution.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      10 records
      • CVE-2007-3138
        31Monitor

        Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute ar

        HighCVSS 7.5Proof of conceptEPSS 3%

        open solution · quick.cartJun 8, 2007

      • CVE-2005-1585
        30Monitor

        Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) iCategory o

        HighCVSS 7.5No exploitEPSS 1%

        open solution · quick.forumMay 11, 2005

      • CVE-2005-1588
        30Monitor

        SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL commands via the iCategory pa

        HighCVSS 7.5No exploitEPSS 1%

        open solution · quick.cartMay 11, 2005

      • CVE-2007-1407
        30Monitor

        Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and attack vectors, related to a "low critical exploit."

        HighCVSS 7.5No exploitEPSS 1%

        open solution · quick.cartMar 10, 2007

      • CVE-2007-3139
        28Monitor

        config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the applicati

        MediumCVSS 6.8Proof of conceptEPSS 4%

        open solution · quick.cartJun 8, 2007

      • CVE-2006-6390
        28Monitor

        Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disab

        MediumCVSS 6.8Proof of conceptEPSS 2%

        open solution · quick.cartDec 7, 2006

      • CVE-2006-6391
        28Monitor

        Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disab

        MediumCVSS 6.8Proof of conceptEPSS 2%

        open solution · quick.cartDec 7, 2006

      • CVE-2005-1586
        20Monitor

        Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web

        MediumCVSS 5.0No exploitEPSS 1%

        open solution · quick.forumMay 14, 2005

      • CVE-2005-1587
        18Monitor

        Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject arbitrary web script or HTML vi

        MediumCVSS 4.3Proof of conceptEPSS 2%

        open solution · quick.cartMay 14, 2005

      • CVE-2005-1584
        17Monitor

        Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject arbitrary web script or HTML v

        MediumCVSS 4.3No exploitEPSS 1%

        open solution · quick.forumMay 14, 2005