CVE-2006-6390

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote…

published December 8, 2006

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the config[db_type] parameter to (1) categories.php, (2) couriers.php, (3) orders.php, and (4) products.php in actions_admin/; and (5) orders.php and (6) products.php in actions_client/; as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by one of these PHP scripts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02143 · 81.9th percentile
Published
2006-12-08T01:00Z
EPSS history
Timeline
  • 08 DEC 01:00Z
    Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote…
    cvelistv5