PT-2023-11576

Name of the Vulnerable Software and Affected Versions UQCMS version 2.1.3 Description The issue allows attackers to execute arbitrary commands via the cookie cart parameter to the "/index.php/cart/num" API endpoint. This is due to a SQL Injection vulnerability in the file...