PatchTheCVEopen solution vulnerabilities
Recent CVEs affecting open solution products. 10 tracked.
open solution has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2007-06-08. Highest priority: CVE-2007-3138 (score 53/100).
- CVE-2007-3139 MEDIUM 6.8 UPGRADE config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote att
- CVE-2007-3138 HIGH 7.5 UPGRADE Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attac
- CVE-2007-1407 HIGH 7.5 UPGRADE Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and attack vectors, related
- CVE-2006-6391 MEDIUM 6.8 DOWNGRADE Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled
- CVE-2006-6390 MEDIUM 6.8 DOWNGRADE Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled
- CVE-2005-1588 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL
- CVE-2005-1587 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject a
- CVE-2005-1586 MEDIUM 5.0 DOWNGRADE Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored wo
- CVE-2005-1585 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL co
- CVE-2005-1584 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject
FAQ
How do I fix open solution vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is open solution being exploited right now?
None of the tracked open solution CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which open solution CVE should I patch first?
CVE-2007-3138 currently ranks highest (53/100): Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attac.