CVE:CVE-2006-6391
CNNVD:CNNVD-200612-150
Open Solution Quick.Cart 2.0存在多个目录遍历漏洞，当register_globals启用并且magic_quotes_gpc禁用时，远程攻击者可通过传给(1)actions_admin/other.php和(2)actions_client/gallery.php的config[db_type]参数（该参数中包含..）来包含任意文件。
solution:Upgrade open_solution quick.cart to a higher version than 2.0,and avoid the version 2.0