CVE-2008-6735: Thaiquickcart

Medium severity, CVSS 5.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the sLanguage cookie.

Affected products

• Thaiquickcart Thaiquickcart: version 3 only

Published 2009-04-21. Last modified 2026-06-16.