CVE-2012-6430 Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or H...
MediumCVSS 4.3
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSolution Quick.Cart | = 6.0 | No fix listed |
| OpenSolution quick cms | = 5.0 | No fix listed |
References
- 20130109 Cross-Site Scripting (XSS) vulnerability in Quick.Cms and Quick.Cart exploit mailing-list
- 89119 vdb-entry
- 89120 vdb-entry
- packetstormsecurity.com exploit
- 51769 third-party-advisory vendor-advisory
- 51813 third-party-advisory vendor-advisory
- quickcms-quickcart-admin-xss(81169) vdb-entry
- www.htbridge.com exploit