TI-2020-13992 CVE-2020-21120 · GHSA-c2mf-57q4-3j6fSQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows…Priority HIGH 82SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookie_cart parameter to /index.php/cart/num.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00977 · Published 2023-02-15 · No fix listed CWE-89