CVE-2012-6430

MEDIUM
2014-03-24 [email protected]
4.3
CVSS 2.0
Share

CVSS Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
P
Availability
None

Lifecycle Timeline

3
Analysis Generated
Mar 16, 2026 - 18:30 vuln.today
PoC Detected
Mar 16, 2026 - 17:53 vuln.today
Public exploit code
CVE Published
Mar 24, 2014 - 16:43 nvd
MEDIUM 4.3

Tags

XSS PHP Quick.Cart Quick Cms

Description

Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140.

Analysis

Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin.php.

Technical Context

Cross-site scripting (XSS) allows injection of client-side scripts into web pages viewed by other users due to insufficient output encoding.

Affected Products

Affected products: Opensolution Quick.Cart 6.0, Opensolution Quick Cms 5.0

Remediation

Encode all user-supplied output contextually (HTML, JS, URL). Implement Content Security Policy (CSP) headers. Use HTTPOnly and Secure cookie flags.

Priority Score

52
Low Medium High Critical
KEV: 0
EPSS: +10.9
CVSS: +22
POC: +20

Share

CVE-2012-6430 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy