CVE:CVE-2012-6430
CNNVD:CNNVD-201301-195
Open Solution Quick.Cms和Quick.Cart都是波兰OpenSolution公司的产品。Quick.Cms是一套基于PHP的开源内容管理系统（CMS）；Quick.Cart是一套基于PHP的开源电子商务软件。
Open Solution Quick.Cms 5.0版本和Quick.Cart 6.0版本中存在跨站脚本漏洞，该漏洞源于admin.php脚本没有充分过滤‘PATH_INFO’参数。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade opensolution quick_cart to a higher version than 6.0,and avoid the version 6.0; Upgrade opensolution quick_cms to a higher version than 5.0,and avoid the version 5.0