Unscored severity · published Nov 27, 2012
CVE-2012-6049
Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a cookie, which reveals the installation…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a cookie, which reveals the installation path in an error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Quick.cart · Opensolution
5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-6049
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-6049
hauntit.blogspot.com
http://hauntit.blogspot.com/2012/03/en-quickcartv50-information-disclosure.html
packetstormsecurity.org
http://packetstormsecurity.org/files/112242/Quick.Cart-5.0-Information-Disclosure.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/75204
More from Quick.cart
9.8
CVE-2026-23796
Session Fixation in Quick.Cart
7.2
CVE-2025-67684
Remote Code Execution via Local File Inclusion in Quick.Cart
7.2
CVE-2020-35754
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the…
6.9
CVE-2026-41875
Cross-Site Request Forgery in admin panel of Quick.Cart
6.8
CVE-2026-41874
Hard-coded admin credentials in Quick.Cart