CVE-2007-0258

Cross-site scripting (XSS) vulnerability in index.php in (1) Fastilo 2.0 and (2) Open Solution Quick.Cart 2.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: some of these details are obtained from third party information.

• http://14house.blogspot.com/2007/01/fastilo-open-source-shopping-cart-vuln.htmlExploit
• http://osvdb.org/32730
• http://osvdb.org/32731
• http://secunia.com/advisories/23733Vendor Advisory
• http://secunia.com/advisories/23738Vendor Advisory
• http://www.securityfocus.com/bid/21971
• http://www.securityfocus.com/bid/22007
• http://www.vupen.com/english/advisories/2007/0156
• http://www.vupen.com/english/advisories/2007/0157
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31475
• http://14house.blogspot.com/2007/01/fastilo-open-source-shopping-cart-vuln.htmlExploit
• http://osvdb.org/32730
• http://osvdb.org/32731
• http://secunia.com/advisories/23733Vendor Advisory
• http://secunia.com/advisories/23738Vendor Advisory
• http://www.securityfocus.com/bid/21971
• http://www.securityfocus.com/bid/22007
• http://www.vupen.com/english/advisories/2007/0156
• http://www.vupen.com/english/advisories/2007/0157
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31475

Published

Jan 16, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0252Unspecified vulnerability in easy-content filemanager allows…
• CVE-2007-0253Unspecified vulnerability in the grsecurity patch has unspec…
• CVE-2007-0254Format string vulnerability in the errors_create_window func…
• CVE-2007-0255XINE 0.99.4 allows user-assisted remote attackers to cause a…
• CVE-2007-0256VideoLAN VLC 0.8.6a allows remote attackers to cause a denia…
• CVE-2007-0257Unspecified vulnerability in the expand_stack function in gr…7.8
• CVE-2007-0259Ezboxx Portal System Beta 0.7.6 and earlier allows remote at…
• CVE-2007-0260PHP remote file inclusion vulnerability in index.php in Naig…
• CVE-2007-0261snews.php in sNews 1.5.30 and earlier does not properly exit…
• CVE-2007-0262WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properl…
• CVE-2007-0263Unspecified vulnerability in Total Commander before 6.5.6 al…
• CVE-2007-0264Buffer overflow in Winzip32.exe in WinZip 9.0 allows local u…