opensolution kayıtları

opensolution üreticisine ait 34 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

34 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
37İzleyin	CVE-2025-67684İstismar yok	Remote Code Execution via Local File Inclusion in Quick.Cartopensolution · quick.cart · CWE-22 RCE Yol geçişi	Kritik9,4	—	%0,8	22 Oca 2026
37İzleyin	CVE-2024-58308İstismar yok	Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Loginopensolution · quick cms · CWE-89 Kimlik doğrulamasız Kimlik doğrulama atlatma SQL enjeksiyonu	Kritik9,3	—	%0,7	11 Ara 2025
34İzleyin	CVE-2023-43345Kavram kanıtı	Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scropensolution · quick cms · CWE-79 RCE XSS	Yüksek8,6	—	%0,4	19 Eki 2023
31İzleyin	CVE-2020-35754Kavram kanıtı	OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Executopensolution · quick.cart · CWE-94 RCE	Yüksek7,2	—	%10,5	28 Oca 2021
30İzleyin	CVE-2009-1410Kavram kanıtı	SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameteopensolution · quick.cms.lite · CWE-89 pre-auth RCE SQL enjeksiyonu	Yüksek7,5	—	%1,0	24 Nis 2009
28İzleyin	CVE-2007-0258İstismar yok	Cross-site scripting (XSS) vulnerability in index.php in (1) Fastilo 2.0 and (2) Open Solution Quick.Cart 2.0 allows remote attackers to injfastilo · fastilo Kimlik doğrulamasız XSS	Orta6,8	—	%2,0	16 Oca 2007
27İzleyin	CVE-2009-4120Kavram kanıtı	Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the admiopensolution · quick.cart · CWE-352 Kimlik doğrulamasız CSRF	Orta6,8	—	%1,0	30 Kas 2009
27İzleyin	CVE-2009-4121İstismar yok	Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authopensolution · quick.cms · CWE-352 Kimlik doğrulamasız CSRF	Orta6,8	—	%0,6	30 Kas 2009
27İzleyin	CVE-2025-9982İstismar yok	Hard-coded admin credentials in Quick.CMSopensolution · quick.cms · CWE-256 Yerel yetki yükseltme	Orta6,9	—	%0,3	14 Kas 2025
27İzleyin	CVE-2026-23797İstismar yok	Plaintext password display in Quick.Cartopensolution · quick.cart · CWE-256	Orta6,9	—	%0,3	5 Şub 2026
27İzleyin	CVE-2025-54541İstismar yok	Cross-Site Request Forgery in QuickCMSopensolution · quick.cms · CWE-352 Kimlik doğrulamasız CSRF	Orta6,9	—	%0,1	28 Ağu 2025
27İzleyin	CVE-2025-54542İstismar yok	Sending Password in GET Requestopensolution · quick.cms · CWE-598	Orta6,9	—	%0,1	28 Ağu 2025
21İzleyin	CVE-2006-5834Kavram kanıtı	Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via aopensolution · quick.cms.lite Kimlik doğrulamasız Yol geçişi	Orta5,0	—	%2,3	9 Kas 2006
21İzleyin	CVE-2023-43343Kavram kanıtı	Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scropensolution · quick cms · CWE-79 RCE XSS	Orta5,4	—	%0,7	5 Eki 2023
21İzleyin	CVE-2023-43344Kavram kanıtı	Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scropensolution · quick cms · CWE-79 RCE XSS	Orta5,4	—	%0,6	19 Eki 2023
21İzleyin	CVE-2023-43342Kavram kanıtı	Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scropensolution · quick cms · CWE-79 RCE XSS	Orta5,4	—	%0,5	19 Eki 2023
21İzleyin	CVE-2023-43346Kavram kanıtı	Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scropensolution · quick cms · CWE-79 RCE XSS	Orta5,4	—	%0,5	20 Eki 2023
21İzleyin	CVE-2025-54544İstismar yok	Stored XSS in QuickCMSopensolution · quick.cms · CWE-79 Kimlik doğrulamasız XSS	Orta5,3	—	%0,2	28 Ağu 2025
21İzleyin	CVE-2025-54543İstismar yok	Stored XSS in QuickCMSopensolution · quick.cms · CWE-79 Kimlik doğrulamasız XSS	Orta5,3	—	%0,2	28 Ağu 2025
20İzleyin	CVE-2012-6049İstismar yok	Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a coopensolution · quick.cart · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,0	—	%1,4	27 Kas 2012
20İzleyin	CVE-2025-67683İstismar yok	Reflected XSS in Quick.Cartopensolution · quick.cart · CWE-79 Kimlik doğrulamasız XSS	Orta5,1	—	%0,3	22 Oca 2026
20İzleyin	CVE-2025-55175İstismar yok	Reflected XSS in QuickCMSopensolution · quick.cms · CWE-79 Kimlik doğrulamasız XSS	Orta5,1	—	%0,3	28 Ağu 2025
20İzleyin	CVE-2025-54540İstismar yok	Reflected XSS in QuickCMSopensolution · quick.cms · CWE-79 Kimlik doğrulamasız XSS	Orta5,1	—	%0,3	28 Ağu 2025
20İzleyin	CVE-2025-54174İstismar yok	Cross-Site Request Forgery in QuickCMSopensolution · quick.cms · CWE-352 Kimlik doğrulamasız CSRF	Orta5,1	—	%0,1	20 Ağu 2025
19İzleyin	CVE-2026-23796İstismar yok	Session Fixation in Quick.Cartopensolution · quick.cart · CWE-384	Orta4,8	—	%0,3	5 Şub 2026

CVE-2025-67684
37İzleyin
Remote Code Execution via Local File Inclusion in Quick.Cart
KritikCVSS 9,4İstismar yokEPSS %1
- RCE
- Yol geçişi
opensolution · quick.cart22 Oca 2026
CVE-2024-58308
37İzleyin
Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- SQL enjeksiyonu
opensolution · quick cms11 Ara 2025
CVE-2023-43345
34İzleyin
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr
YüksekCVSS 8,6Kavram kanıtıEPSS %0
- RCE
- XSS
opensolution · quick cms19 Eki 2023
CVE-2020-35754
31İzleyin
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execut
YüksekCVSS 7,2Kavram kanıtıEPSS %10
- RCE
opensolution · quick.cart28 Oca 2021
CVE-2009-1410
30İzleyin
SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id paramete
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- pre-auth RCE
- SQL enjeksiyonu
opensolution · quick.cms.lite24 Nis 2009
CVE-2007-0258
28İzleyin
Cross-site scripting (XSS) vulnerability in index.php in (1) Fastilo 2.0 and (2) Open Solution Quick.Cart 2.0 allows remote attackers to inj
OrtaCVSS 6,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- XSS
fastilo · fastilo16 Oca 2007
CVE-2009-4120
27İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the admi
OrtaCVSS 6,8Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- CSRF
opensolution · quick.cart30 Kas 2009
CVE-2009-4121
27İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the auth
OrtaCVSS 6,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
opensolution · quick.cms30 Kas 2009
CVE-2025-9982
27İzleyin
Hard-coded admin credentials in Quick.CMS
OrtaCVSS 6,9İstismar yokEPSS %0
- Yerel yetki yükseltme
opensolution · quick.cms14 Kas 2025
CVE-2026-23797
27İzleyin
Plaintext password display in Quick.Cart
OrtaCVSS 6,9İstismar yokEPSS %0
opensolution · quick.cart5 Şub 2026
CVE-2025-54541
27İzleyin
Cross-Site Request Forgery in QuickCMS
OrtaCVSS 6,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
opensolution · quick.cms28 Ağu 2025
CVE-2025-54542
27İzleyin
Sending Password in GET Request
OrtaCVSS 6,9İstismar yokEPSS %0
opensolution · quick.cms28 Ağu 2025
CVE-2006-5834
21İzleyin
Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a
OrtaCVSS 5,0Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- Yol geçişi
opensolution · quick.cms.lite9 Kas 2006
CVE-2023-43343
21İzleyin
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr
OrtaCVSS 5,4Kavram kanıtıEPSS %1
- RCE
- XSS
opensolution · quick cms5 Eki 2023
CVE-2023-43344
21İzleyin
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr
OrtaCVSS 5,4Kavram kanıtıEPSS %1
- RCE
- XSS
opensolution · quick cms19 Eki 2023
CVE-2023-43342
21İzleyin
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr
OrtaCVSS 5,4Kavram kanıtıEPSS %0
- RCE
- XSS
opensolution · quick cms19 Eki 2023
CVE-2023-43346
21İzleyin
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr
OrtaCVSS 5,4Kavram kanıtıEPSS %0
- RCE
- XSS
opensolution · quick cms20 Eki 2023
CVE-2025-54544
21İzleyin
Stored XSS in QuickCMS
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opensolution · quick.cms28 Ağu 2025
CVE-2025-54543
21İzleyin
Stored XSS in QuickCMS
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opensolution · quick.cms28 Ağu 2025
CVE-2012-6049
20İzleyin
Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a co
OrtaCVSS 5,0İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
opensolution · quick.cart27 Kas 2012
CVE-2025-67683
20İzleyin
Reflected XSS in Quick.Cart
OrtaCVSS 5,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opensolution · quick.cart22 Oca 2026
CVE-2025-55175
20İzleyin
Reflected XSS in QuickCMS
OrtaCVSS 5,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opensolution · quick.cms28 Ağu 2025
CVE-2025-54540
20İzleyin
Reflected XSS in QuickCMS
OrtaCVSS 5,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opensolution · quick.cms28 Ağu 2025
CVE-2025-54174
20İzleyin
Cross-Site Request Forgery in QuickCMS
OrtaCVSS 5,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
opensolution · quick.cms20 Ağu 2025
CVE-2026-23796
19İzleyin
Session Fixation in Quick.Cart
OrtaCVSS 4,8İstismar yokEPSS %0
opensolution · quick.cart5 Şub 2026