Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookie_cart parameter to /index.php/cart/num.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
UQCMS SQL注入漏洞
Vulnerability Description
UQCMS是一款网上可以交易的简易购买软件，可以对产品进行优惠等管理。 UQCMS 2.1.3版本存在安全漏洞，该漏洞源于homecontrolscart.class.php文件中包含SQL注入漏洞。攻击者利用该漏洞通过/index.php/cart/num的cookie_cart参数执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A