Skip to content
Noroxi

OpenSolution records

34 published records for vendor opensolution.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 23
  3. 25
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

34 records
  • CVE-2025-67684
    37Monitor

    Remote Code Execution via Local File Inclusion in Quick.Cart

    CriticalCVSS 9.4No exploitEPSS 1%

    opensolution · quick.cartJan 22, 2026

  • CVE-2024-58308
    37Monitor

    Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login

    CriticalCVSS 9.3No exploitEPSS 1%

    opensolution · quick cmsDec 11, 2025

  • CVE-2023-43345
    34Monitor

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr

    HighCVSS 8.6Proof of conceptEPSS 0%

    opensolution · quick cmsOct 19, 2023

  • CVE-2020-35754
    31Monitor

    OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execut

    HighCVSS 7.2Proof of conceptEPSS 10%

    opensolution · quick.cartJan 28, 2021

  • CVE-2009-1410
    30Monitor

    SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id paramete

    HighCVSS 7.5Proof of conceptEPSS 1%

    opensolution · quick.cms.liteApr 24, 2009

  • CVE-2007-0258
    28Monitor

    Cross-site scripting (XSS) vulnerability in index.php in (1) Fastilo 2.0 and (2) Open Solution Quick.Cart 2.0 allows remote attackers to inj

    MediumCVSS 6.8No exploitEPSS 2%

    fastilo · fastiloJan 16, 2007

  • CVE-2009-4120
    27Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the admi

    MediumCVSS 6.8Proof of conceptEPSS 1%

    opensolution · quick.cartNov 30, 2009

  • CVE-2009-4121
    27Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the auth

    MediumCVSS 6.8No exploitEPSS 1%

    opensolution · quick.cmsNov 30, 2009

  • CVE-2025-9982
    27Monitor

    Hard-coded admin credentials in Quick.CMS

    MediumCVSS 6.9No exploitEPSS 0%

    opensolution · quick.cmsNov 14, 2025

  • CVE-2026-23797
    27Monitor

    Plaintext password display in Quick.Cart

    MediumCVSS 6.9No exploitEPSS 0%

    opensolution · quick.cartFeb 5, 2026

  • CVE-2025-54541
    27Monitor

    Cross-Site Request Forgery in QuickCMS

    MediumCVSS 6.9No exploitEPSS 0%

    opensolution · quick.cmsAug 28, 2025

  • CVE-2025-54542
    27Monitor

    Sending Password in GET Request

    MediumCVSS 6.9No exploitEPSS 0%

    opensolution · quick.cmsAug 28, 2025

  • CVE-2006-5834
    21Monitor

    Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a

    MediumCVSS 5.0Proof of conceptEPSS 2%

    opensolution · quick.cms.liteNov 9, 2006

  • CVE-2023-43343
    21Monitor

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr

    MediumCVSS 5.4Proof of conceptEPSS 1%

    opensolution · quick cmsOct 5, 2023

  • CVE-2023-43344
    21Monitor

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr

    MediumCVSS 5.4Proof of conceptEPSS 1%

    opensolution · quick cmsOct 19, 2023

  • CVE-2023-43342
    21Monitor

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr

    MediumCVSS 5.4Proof of conceptEPSS 0%

    opensolution · quick cmsOct 19, 2023

  • CVE-2023-43346
    21Monitor

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr

    MediumCVSS 5.4Proof of conceptEPSS 0%

    opensolution · quick cmsOct 20, 2023

  • CVE-2025-54544
    21Monitor

    Stored XSS in QuickCMS

    MediumCVSS 5.3No exploitEPSS 0%

    opensolution · quick.cmsAug 28, 2025

  • CVE-2025-54543
    21Monitor

    Stored XSS in QuickCMS

    MediumCVSS 5.3No exploitEPSS 0%

    opensolution · quick.cmsAug 28, 2025

  • CVE-2012-6049
    20Monitor

    Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a co

    MediumCVSS 5.0No exploitEPSS 1%

    opensolution · quick.cartNov 27, 2012

  • CVE-2025-67683
    20Monitor

    Reflected XSS in Quick.Cart

    MediumCVSS 5.1No exploitEPSS 0%

    opensolution · quick.cartJan 22, 2026

  • CVE-2025-55175
    20Monitor

    Reflected XSS in QuickCMS

    MediumCVSS 5.1No exploitEPSS 0%

    opensolution · quick.cmsAug 28, 2025

  • CVE-2025-54540
    20Monitor

    Reflected XSS in QuickCMS

    MediumCVSS 5.1No exploitEPSS 0%

    opensolution · quick.cmsAug 28, 2025

  • CVE-2025-54174
    20Monitor

    Cross-Site Request Forgery in QuickCMS

    MediumCVSS 5.1No exploitEPSS 0%

    opensolution · quick.cmsAug 20, 2025

  • CVE-2026-23796
    19Monitor

    Session Fixation in Quick.Cart

    MediumCVSS 4.8No exploitEPSS 0%

    opensolution · quick.cartFeb 5, 2026