CVE:CVE-2020-35754
CNNVD:CNNVD-202101-2494
Opensolution Quick.Cart和Opensolution Quick.Cms都是波兰Opensolution公司的产品。Opensolution Quick.Cart是一款用于构建购物车平台的建站系统。Opensolution Quick.Cms是一款用于构建文本管理平台的建站系统。
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 存在注入漏洞，该漏洞允许经过身份验证的用户通过Language选项卡的输入字段执行代码注入。
solution:Upgrade opensolution quick.cart to a higher version than 6.7,and avoid the version (,6.7); Upgrade opensolution quick.cms to a higher version than 6.7,and avoid the version (,6.7)