GCVE - cpe:2.3:a:open_solution:quick.cart:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:open_solution:quick.cart:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Open Solution (`4813ab34-01cc-5f28-837e-d4a35534c36c`)
Product	Quick.Cart (`deac64a8-60c7-5410-a443-6f57f237379b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:sourceforge/quickcart`	purl2cpe	2026-06-01 10:11:34.424979

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-3139`	vulnerable	2026-06-08 04:49:53.323619	Details available config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code. Published: 2007-06-08T16:00:00.000Z Updated: 2024-08-07T14:05:29.242Z Open on db.gcve.eu Reference links http://secunia.com/advisories/25513 http://osvdb.org/36961 https://exchange.xforce.ibmcloud.com/vulnerabilities/34688 https://www.exploit-db.com/exploits/4025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3138`	vulnerable	2026-06-08 04:49:53.323106	Details available Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in an sLanguage cookie, which is used to define a value in config/general.php. Published: 2007-06-08T16:00:00.000Z Updated: 2024-08-07T14:05:29.405Z Open on db.gcve.eu Reference links http://secunia.com/advisories/25513 http://www.vupen.com/english/advisories/2007/2038 http://www.securityfocus.com/bid/24299 https://exchange.xforce.ibmcloud.com/vulnerabilities/34687 https://www.exploit-db.com/exploits/4025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1407`	vulnerable	2026-06-08 04:49:42.417119	Details available Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and attack vectors, related to a "low critical exploit." Published: 2007-03-10T22:00:00.000Z Updated: 2024-09-17T02:20:55.750Z Open on db.gcve.eu Reference links http://opensolution.org/Quick.Cart/forum/?p=readTopic&nr=3878 http://opensolution.org/download/Quick.Cart/changeLog.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.