CVE-2012-6430 - CVE House
Back to Database
Status published Medium CVE-2012-6430

Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-6430

Credits & Attribution

No credits recorded in the NVD database.

References

More from opensolution

View All →
CVE-2024-58308
Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login
Critical 9.3
CVE-2020-35754
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an...
High 7.2
CVE-2012-6049
Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive...
Medium 5
CVE-2012-3833
Cross-site scripting (XSS) vulnerability in the default index page in...
Medium 4.3
CVE-2009-4121
Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and...
Medium 6.8

Affected Vendor

opensolution

View all reports →

Affected Software

quick.cart, quick cms
Vulnerable Versions:
6.0, 5.0

Timeline

Official Publish: March 24th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.