CVE-2020-21120

CRITICAL 9.8CVE-2020-21120 · Published 15/02/2023 · updated 17/06/2026

In short

CVE-2020-21120 is a CRITICAL (CVSS 9.8) vulnerability affecting uqcms (uqcms).
Chance of exploitation in the next 30 days (EPSS): 0.98%, higher than 62.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
uqcms uqcms	`= 2.1.3`	No fix yet

Description

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookie_cart parameter to /index.php/cart/num.

References

cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html · Technical Description
alixiaowei/cve_test · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free