OpenSolution

Records47All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

OpenSolution records in CISA KEV

No OpenSolution vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Quick.cms 15 records MEDIUM Quick.cart 9 records MEDIUM Quick Cms 7 records HIGH Quick.cms.lite 4 records LOW Quick.car 1 record LOW Quick.cms.ext 1 record LOW

Records

4 records in Quick.cms.lite · all components

TI-2009-01334 CVE-2009-1410 · GHSA-q7jx-m6qw-6j3q

SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00987 Published 2009-04-24 No fix listed CWE-89

TI-2009-03910 CVE-2009-4121 · GHSA-966q-pqww-2262

Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete web pages via a p-d…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00649 Published 2009-12-01 No fix listed CWE-352

TI-2006-05618 CVE-2006-5834 · GHSA-j3xr-53x6-q4qh

Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3…

LOW 27

Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02351 Published 2006-11-10 No fix listed

TI-2008-03970 CVE-2008-4139 · GHSA-8xh8-2w7w-92cr

Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1…

LOW 16

Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01516 Published 2008-09-19 No fix listed CWE-79

Open these records in search →

Critical	2
High	6
Medium	37
Low	2
No CVSS	0