Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2817▼ 183 respecto a la semana anterior
Críticas / altas1372▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
32 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.2) | 10% | — | Opensolution Quick.cartOpensolution Quick.cms | 28/1/2021 | 17/6/2026 | OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Language tab. | |
| Modificada | Media (4.3) | 3.9% | — | Opensolution Quick.cartOpensolution Quick CMS | 24/3/2014 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140. | |
| Modificada | Media (4.3) | 1.2% | — | Opensolution Quick.cms | 3/7/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. | |
| Modificada | Media (6.8) | 0.65% | — | Opensolution Quick.cmsOpensolution Quick.cms.lite | 1/12/2009 | 16/6/2026 | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete web pages via a p-delete action to admin.php, and possibly (2) delete products or (3) delete orders via unspecified… | |
| Modificada | Alta (7.5) | 0.99% | — | Opensolution Quick.cms.lite | 24/4/2009 | 16/6/2026 | SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. | |
| Modificada | Baja (2.6) | 1.5% | — | Opensolution Quick.cms.lite | 24/9/2008 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string. | |
| Modificada | Media (5) | 2.3% | — | Opensolution Quick.cms.lite | 10/11/2006 | 16/6/2026 | Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the sLanguage Cookie parameter. |