Quick.Cart has been reported to contain a flaw that may allow an attacker to manipulate SQL commands. The issue was reported to affect the iCategory variable of the index.php script. Subsequent research indicates that Quick.Cart does not use an SQL database of any kind, rather it uses flat files to maintain database information. The reported vulnerability is incorrect.
Classification
Location:
Remote/Network Access Required
Attack Type:
Information Disclosure,
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
Exploit:
Exploit Available
OSVDB:
Web Related,
Myth/Fake
Solution
The vulnerability reported is incorrect. No solution required.