Quick.cart

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Langua…CVE-2020-35754Opensolution · 11% likely

   CWE-94

2. Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbi…CVE-2012-6430Opensolution · 3.9% likely

   CWE-79

3. config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOT…CVE-2007-3139Open Solution · 3.5% likely
4. Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot)…CVE-2007-3138Open Solution · 2.9% likely
5. Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include…CVE-2006-6390Open Solution · 2.2% likely
6. Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include…CVE-2006-6391Open Solution · 2.0% likely
7. Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject arbitrary web script or HTML via the sWord parameter.CVE-2005-1587Open Solution · 1.7% likely
8. Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string.CVE-2008-4140Opensolution · 1.5% likely

   CWE-79

9. Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a cookie, which reveals the installation pa…CVE-2012-6049Opensolution · 1.4% likely

   CWE-200

10. SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL commands via the iCategory parameter. NOTE: the vendor has privately…CVE-2005-1588Open Solution · 1.2% likely
11. Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and attack vectors, related to a "low critical exploit."CVE-2007-1407Open Solution · 1.0% likely
12. Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete…CVE-2009-4120Opensolution · 1.0% likely

    CWE-352

13. Remote Code Execution via Local File Inclusion in Quick.CartCVE-2025-67684OpenSolution · CVSS 9.4 · 0.8% likely

    CWE-22

14. Session Fixation in Quick.CartCVE-2026-23796OpenSolution · CVSS 4.8 · 0.3% likely

    CWE-384

15. Plaintext password display in Quick.CartCVE-2026-23797OpenSolution · CVSS 6.9 · 0.3% likely

    CWE-256

16. Reflected XSS in Quick.CartCVE-2025-67683OpenSolution · CVSS 5.1 · 0.3% likely

    CWE-79

17. Multiple Cross-Site Request Forgery in Quick.CartCVE-2025-10317OpenSolution · CVSS 5.1 · 0.2% likely

    CWE-352

18. Hard-coded admin credentials in Quick.CartCVE-2026-41874OpenSolution · CVSS 6.8 · 0.2% likely

    CWE-256

19. Cross-Site Request Forgery in admin panel of Quick.CartCVE-2026-41875OpenSolution · CVSS 6.9 · 0.2% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.