EUVD-2020-13899

Malware in sbrugna...

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

Sql injection

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

CVE-2020-21120: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

PT-2023-11576

Name of the Vulnerable Software and Affected Versions UQCMS version 2.1.3 Description The issue allows attackers to execute arbitrary commands via the cookie cart parameter to the "/index.php/cart/num" API endpoint. This is due to a SQL Injection vulnerability in the file...

CVE-2020-21120

CVE-2020-21120 affects UQCMS 2.1.3 and is caused by an SQL injection in the cart functionality (home\controls\cart.class.php) that can be exploited via the cookie_cart parameter to /index.php/cart/num to execute arbitrary commands. The CVSS metrics in the source indicate a critical impact (C/H, I...

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

XSS Vulnerability in UQCMS Cloud Business-B2B2C System

UQCMS Cloud Business-B2B2C System Multi-merchant e-commerce system is a B2B2C e-commerce software. UQCMS Cloud Merchant-B2B2C System suffers from an XSS vulnerability that can be exploited by attackers to obtain administrator cookie information...

UQCMS Cloud Business - B2B2C system backend has a logic flaw vulnerability

UQCMS Cloud Business-B2B2C System Multi-merchant e-commerce system is a B2B2C e-commerce software. UQCMS Cloud Merchant-B2B2C System has a logic flaw vulnerability in the background, which can be exploited by an attacker to bypass login privileges for administrator operations...

SQL injection vulnerability in ex***.cl***.php file of UQCMS cloud business system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system ex.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

SQL injection vulnerability in the sh***.cl***.php file of UQCMS cloud business system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system sh.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

SQL injection vulnerability in the go***.cl***.php file of UQCMS cloud business system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system go.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

SQL injection vulnerability in the al***.cl***.php file of the UQCMS cloud commerce system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system al.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

SQL Injection Vulnerability in UQCMS Cloud Business System (CNVD-2020-26528)

UQCMS cloud business system is the program using PHP + MYSQL template using smarty template, front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in UQCMS Cloud Business System me***.cl***.php Page

UQCMS cloud business system is the program using PHP + MYSQL template using smarty template, front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system me.cl.php page SQL injection vulnerability exists. An attacker can exploit this vulnerability to obtain...

SQL injection vulnerability in the front-end me***.cl***.php page of UQCMS cloud business system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. SQL injection vulnerability exists in the front-end me.cl.php page of UQCMS Cloud Business System. An attacker can exploit the...

SQL injection vulnerability in uqcms cloud commerce system (CNVD-2020-18781)

uqcms is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. SQL injection vulnerability exists in uqcms cloud commerce syste...