CVE-2020-35754

概要

参考情報

• packetstormsecurity.com/files/161189/Quick.CMS-6.7-Remote-Code-Execution.html · Exploit
• opensolution.org/cms-system-quick-cms.html · Product
• opensolution.org/security-fix-for-cart-and-cms%21-en-1136.html
• secator.pl/index.php/2021/01/28/cve-2020-35754-authenticated-rce-in-quick-cms-and-quick-cart · Exploit

quick.cart のその他の脆弱性

• CVE-2026-23797中 4.9In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page…
• CVE-2026-23796緊急 9.8Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authenticat…
• CVE-2025-67684高 7.2Quick.Cart is vulnerable to Local File Inclusion and Path Traversal issues in the theme selection mechanism. Quick.Cart allows a privileged …
• CVE-2025-67683中 6.1Quick.Cart is vulnerable to reflected XSS via the sSort parameter. An attacker can craft a malicious URL which, when opened, results in arbi…
• CVE-2012-6430中 4.3Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012,…