PT-2014-2384 · Opensolution · Opensolution Quick Cms+1

CVE-2012-6430 · Publicado 2014-03-24 · Atualizado 2026-03-16

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open Solution Quick.Cms version 5.0 Open Solution Quick.Cart version 6.0

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "admin.php". This could potentially lead to unauthorized actions on the affected system.

Recommendations For Open Solution Quick.Cms version 5.0 and Open Solution Quick.Cart version 6.0, consider restricting access to the "admin.php" endpoint until a fix is available. As a temporary workaround, avoid using the PATH INFO to "admin.php" to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-6430

Produtos afetados

Open Solution Quick.Cart

Opensolution Quick Cms

Referências · 11

• 🔥 http://packetstormsecurity.com/files/119422/Quick.Cms-5.0-Quick.Cart-6.0-Cross-Site-Scripting.html · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2013-01/0035.html · Exploit
• 🔥 https://htbridge.com/advisory/HTB23135 · Exploit
• 🔥 https://exploit-db.com/exploits/38207 · Exploit
• http://osvdb.org/89119 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6430 · Nota de Segurança
• http://secunia.com/advisories/51813 · Aviso do Fabricante
• http://secunia.com/advisories/51769 · Aviso do Fabricante
• https://t.me/cveNotify/155524 · Publicação no Telegram
• http://osvdb.org/89120 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81169 · Nota