CVE-2018-18082

XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...

CVE-2018-18082

CVE-2018-18082 is a cross-site scripting vulnerability in Waimai Super Cms 20150505. The issue arises through the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URIs, allowing injection of arbitrary web script/HTML. The connected CNVD/NVD entries confirm the affe...

CVE-2018-18082

XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...

CVE-2018-18082: Improper Neutralization of Input During Web Page Generation

XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...

PT-2018-14337

Name of the Vulnerable Software and Affected Versions Waimai Super Cms version 20150505 Description A security issue exists due to the presence of a cross-site scripting XSS flaw. This issue can be exploited via the fname parameter in the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave...

Chinese Spying Chips Found Hidden On Servers Used By US Companies

A media report today revealed details of a significant supply chain attack which appears to be one of the largest corporate espionage and hardware hacking programs from a nation-state. According to a lengthy report published today by Bloomberg, a tiny surveillance chip, not much bigger than a gra...

Chinese Spying Chips Found Hidden On Servers Used By US Companies

A media report today revealed details of a significant supply chain attack which appears to be one of the largest corporate espionage and hardware hacking programs from a nation-state. According to a lengthy report published today by Bloomberg, a tiny surveillance chip, not much bigger than a gra...

CVE-2018-17391

SQL Injection exists in authorspost.php in Super Cms Blog Pro 1.0 via the author parameter...

Sql injection

SQL Injection exists in authorspost.php in Super Cms Blog Pro 1.0 via the author parameter...

Super Cms Blog Pro SQL Injection Vulnerability

Super Cms Blog Pro is a personal blogging system. A SQL injection vulnerability exists in Super Cms Blog Pro version 1.0. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

CVE-2018-17391

SQL Injection exists in authorspost.php in Super Cms Blog Pro 1.0 via the author parameter...

CVE-2018-17391: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in authorspost.php in Super Cms Blog Pro 1.0 via the author parameter...

CVE-2018-17391

CVE-2018-17391 describes an SQL injection in Super Cms Blog Pro 1.0, exploitable via the authors_post.php?author= parameter. Multiple sources (NVD, CVE list, CNVD, Prion, CIRCL) reference the same vulnerability with the same affected component and entry. Public exploit and proof-of-concept activi...

PT-2018-14009

Name of the Vulnerable Software and Affected Versions Super Cms Blog Pro version 1.0 Description A SQL Injection issue exists in the authors post.php file of Super Cms Blog Pro, specifically via the author parameter. Recommendations For Super Cms Blog Pro version 1.0, consider restricting access ...

Super Cms Blog Pro 1.0 SQL Injection

Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://coolscript.cf/ Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-17391 Exploit Author: Ihsan...

Super Cms Blog Pro 1.0 - SQL Injection

Super Cms Blog Pro 1.0 - SQL Injection Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://coolscript.cf/ Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Super Cms Blog Pro 1.0 - SQL Injection

Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://coolscript.cf/ Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-17391 Exploit Author: Ihsan...

CVE-2018-16448

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...

CVE-2018-16448

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...

waimai Super Cms Cross-Site Request Forgery Vulnerability (CNVD-2018-19089)

waimai Super Cms is a takeaway ordering system. The system is compatible with IE, Firefox, Chrome, Safari and Opera browsers. A cross-site request forgery vulnerability exists in waimai Super Cms 20150505, which can be exploited by a remote attacker to change the configuration with the help of th...