Unscored severity · published Sep 24, 2008
CVE-2008-4140
Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Quick.cart · Opensolution
3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4140
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4140
secunia.com
http://secunia.com/advisories/31938
www.securityfocus.com
http://www.securityfocus.com/archive/1/496477/100/0/threaded
Exploit
http://www.securityfocus.com/bid/31216
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45441
More from Quick.cart
9.8
CVE-2026-23796
Session Fixation in Quick.Cart
7.2
CVE-2025-67684
Remote Code Execution via Local File Inclusion in Quick.Cart
7.2
CVE-2020-35754
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the…
6.9
CVE-2026-41875
Cross-Site Request Forgery in admin panel of Quick.Cart
6.8
CVE-2026-41874
Hard-coded admin credentials in Quick.Cart