CVE-2007-3139: Open Solution Quick.cart

Medium severity, CVSS 6.8. EPSS: 3.5% chance of exploitation in the next 30 days.

config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code.

Affected products

• Open Solution Quick.cart: up to and including 2.2

Published 2007-06-08. Last modified 2026-06-16.