CVE-2020-21505

CVE-2020-21505 affects waimai Super Cms 20150505 and is a cross-site scripting (XSS) vulnerability in the /admin.php/Link/addsave component. The issue arises from improper handling of input data, enabling a attacker to cause client-side code execution. Documented impact is user interaction not re...

CVE-2020-21505

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php/Link/addsave...

CVE-2020-21504

The CVE-2020-21504 entry documents a cross-site scripting (XSS) vulnerability in waimai Super Cms 20150505, originating from the login component at /admin.php?&m=Public&a=login. Exploitation details are not provided in the documents, but multiple sources describe input handling flaws that enable ...

CVE-2020-21504

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?&m=Public&a=login...

CVE-2020-21503

Waimai Super Cms 20150505 contains a logic flaw in the purchase flow: by manipulating the price parameter via the URL index.php?m=gift&a=addsave with credit set to -1, an attacker can obtain a free product before form submission. Multiple sources (NVD CVE-2020-21503, Red Hat, CNNNVD, CNNVD, CVE l...

CVE-2020-21503

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free...

CVE-2020-21504: Improper Neutralization of Input During Web Page Generation

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?&m=Public&a=login...

PT-2021-10634

Name of the Vulnerable Software and Affected Versions: waimai Super Cms version 20150505 Description: The issue allows attackers to modify a price before form submission by observing data in a packet capture. This is achieved by setting the credit parameter to -1 in the "index.php?m=gift&a=addsav...

PT-2021-10635

Name of the Vulnerable Software and Affected Versions: waimai Super Cms version 20150505 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /admin.php?&m=Public&a=login component. Cross-site scripting XSS is a type of security...

CVE-2020-21505: Improper Neutralization of Input During Web Page Generation

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php/Link/addsave...

PT-2021-10636

Name of the Vulnerable Software and Affected Versions: waimai Super Cms version 20150505 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /admin.php/Link/addsave component. Cross-site scripting XSS is a type of security...

PT-2021-10637

Name of the Vulnerable Software and Affected Versions: waimai Super Cms version 20150505 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /admin.php?m=Config&a=add component. Cross-site scripting XSS is a type of security...

Waimai Super Cms 跨站脚本漏洞

Waimai Super Cms is a takeaway ordering system. A cross-site scripting vulnerability exists in waimai Super Cms, which stems from the product's /admin.php?m=Config&a=add link failing to properly handle input data. An attacker could use this vulnerability to cause client-side code execution. The...

CVE-2020-21503: Exposure of Resource to Wrong Sphere

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free...

CVE-2020-21506: Improper Neutralization of Input During Web Page Generation

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?m=Config&a=add...

Waimai Super Cms 跨站脚本漏洞

Waimai Super Cms is a takeaway ordering system. A cross-site scripting vulnerability exists in waimai Super Cms, which stems from the product's /admin.php/Link/addsave link failing to properly handle input data. An attacker could use this vulnerability to cause client-side code execution. The...

Waimai Super Cms 处理逻辑错误漏洞

Waimai Super Cms is a takeout ordering system. A processing logic error vulnerability exists in Waimai Super Cms that stems from an improper implementation of the processing logic for the product index.php?m=gift&a=addsave link. The vulnerability can be exploited to modify the data captured in a...

CVE-2019-16651

An issue was discovered on Virgin Media Super Hub 3 based on ARRIS TG2492 devices. Because their SNMP commands have insufficient protection mechanisms, it is possible to use JavaScript and DNS rebinding to leak the WAN IP address of a user if they are using certain VPN implementations, this would...

Command injection

An issue was discovered on Virgin Media Super Hub 3 based on ARRIS TG2492 devices. Because their SNMP commands have insufficient protection mechanisms, it is possible to use JavaScript and DNS rebinding to leak the WAN IP address of a user if they are using certain VPN implementations, this would...

CVE-2019-16651

CVE-2019-16651 concerns Virgin Media Super Hub 3 (ARRIS TG2492). The SNMP interface allegedly lacks sufficient protection, enabling exploitation via JavaScript and DNS rebinding to leak the user’s WAN IP address. This can reveal the user’s VPN usage and potentially de-anonymize traffic. The Conne...