CVE-2018-18261

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...

EUVD-2025-22026

Malicious code in bioql PyPI...

CVE-2025-7902

A vulnerability classified as problematic has been found in yangzongzhuan RuoYi up to 4.8.1. Affected is the function addSave of the file com/ruoyi/web/controller/system/SysNoticeController.java. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The...

RuoYi 代码注入漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. RuoYi 4.8.1 and previous versions of code injection vulnerability exists, the vulnerability stems from the file com/ruoyi/web/controller/system/SysNoticeController.java function addSave incorrect operation leads to...

CVE-2025-7902: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in yangzongzhuan RuoYi up to 4.8.1. Affected is the function addSave of the file com/ruoyi/web/controller/system/SysNoticeController.java. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2020-21505

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php/Link/addsave...

CVE-2020-21503

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free...

CVE-2020-21505

CVE-2020-21505 affects waimai Super Cms 20150505 and is a cross-site scripting (XSS) vulnerability in the /admin.php/Link/addsave component. The issue arises from improper handling of input data, enabling a attacker to cause client-side code execution. Documented impact is user interaction not re...

PT-2021-10636

Name of the Vulnerable Software and Affected Versions: waimai Super Cms version 20150505 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /admin.php/Link/addsave component. Cross-site scripting XSS is a type of security...

CVE-2020-21505: Improper Neutralization of Input During Web Page Generation

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php/Link/addsave...

Waimai Super Cms 处理逻辑错误漏洞

Waimai Super Cms is a takeout ordering system. A processing logic error vulnerability exists in Waimai Super Cms that stems from an improper implementation of the processing logic for the product index.php?m=gift&a=addsave link. The vulnerability can be exploited to modify the data captured in a...

CVE-2020-21503: Exposure of Resource to Wrong Sphere

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free...

PT-2021-10634

Name of the Vulnerable Software and Affected Versions: waimai Super Cms version 20150505 Description: The issue allows attackers to modify a price before form submission by observing data in a packet capture. This is achieved by setting the credit parameter to -1 in the "index.php?m=gift&a=addsav...

Waimai Super Cms 跨站脚本漏洞

Waimai Super Cms is a takeaway ordering system. A cross-site scripting vulnerability exists in waimai Super Cms, which stems from the product's /admin.php/Link/addsave link failing to properly handle input data. An attacker could use this vulnerability to cause client-side code execution. The...

CVE-2018-18261

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...

Cross site scripting

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...

CVE-2018-18261

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...

CVE-2018-18261

CVE-2018-18261 affects waimai Super Cms 20150505. A Cross-Site Scripting (XSS) vulnerability exists via the /admin.php/Foodcat/addsave fcname parameter. The issue arises from improper handling/validation of input, allowing injected scripts to be reflected to users. References in Red Hat and NVD c...

PT-2019-9567

Name of the Vulnerable Software and Affected Versions waimai Super Cms version 20150505 Description The issue is related to an XSS vulnerability. It can be exploited via the "/admin.php/Foodcat/addsave" API endpoint, specifically through the fcname parameter. Recommendations For waimai Super Cms...

CVE-2018-18261: Improper Neutralization of Input During Web Page Generation

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...