Read the docs
TI-2006-06138 Aliases CVE-2006-6390GHSA-g378-596r-589f

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when…

Priority LOW 34Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the config[db_type] parameter to (1) categories.php, (2) couriers.php, (3) orders.php, and (4) products.php in actions_admin/; and (5) orders.php and (6) products.php in actions_client/; as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by one of these PHP scripts.

Why it matters now

EPSS 0.02201 82nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:open_solution:quick.cart:2.0:*:*:*:*:*:*:*2.0VulnerableOpen Solution
  • cpe:2.3:a:open_solution:quick.cart:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Open Solution

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-6390
  2. 2026-10-03 Alias added: GHSA-g378-596r-589f

References

Exploit 1

Other 1

  • TI-2007-03035 Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and… CVSS 2.0HIGH 7.5
  • TI-2007-03036 config/general.php in Quick.Cart 2.2 and earlier uses a default username and password… CVSS 2.0MEDIUM 6.8
  • TI-2007-01349 Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and… CVSS 2.0HIGH 7.5
  • TI-2005-01499 SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to… CVSS 2.0HIGH 7.5
  • TI-2006-06139 Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when… CVSS 2.0MEDIUM 6.8
  • TI-2005-01498 Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences