Unscored severity · published Mar 24, 2014
CVE-2012-6430
Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject…
–
CVSS
3.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QC
Quick Cms · Opensolution
5.0 · source: NVD
QU
Quick.cart · Opensolution
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-6430
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-6430
Exploit
http://archives.neohapsis.com/archives/bugtraq/2013-01/0035.html
osvdb.org
http://osvdb.org/89119
osvdb.org
http://osvdb.org/89120
Exploit
http://packetstormsecurity.com/files/119422/Quick.Cms-5.0-Quick.Cart-6.0-Cross-Site-Scripting.html
Vendor Advisory
http://secunia.com/advisories/51769
Vendor Advisory
http://secunia.com/advisories/51813
More from Quick Cms
9.8
CVE-2024-58308
Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login
8.6
CVE-2023-43345
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in…
7.5
CVE-2026-11860
Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS
7.5
CVE-2025-9982
Hard-coded admin credentials in Quick.CMS
7.2
CVE-2020-35754
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the…