CVE-2007-3138

no score yetEPSS 2.9%

open solution quick.cart: no CVSS score yet. EPSS 2.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in an sLanguage cookie, which is used to define a value in config/general.php.

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
Published: 2007-06-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

open_solution:quick.cart

References

http://osvdb.org/36960
http://secunia.com/advisories/25513
http://www.securityfocus.com/bid/24299
http://www.vupen.com/english/advisories/2007/2038
https://exchange.xforce.ibmcloud.com/vulnerabilities/34687

Check your stack JSON