CVE-2025-28412: Improper Access Control

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the /editSave method in SysNoticeController...

CVE-2025-28412

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the /editSave method in SysNoticeController...

Waimai Super Cms Cross-Site Scripting Vulnerability (CNVD-2018-26011)

waimai Super Cms is a takeaway ordering system. The system is compatible with IE, Firefox, Chrome, Safari and Opera browsers. A cross-site scripting vulnerability exists in version 20150505 of Waimai Super Cms. A remote attacker can exploit the vulnerability by sending the 'fname' parameter to th...

CVE-2018-18082

XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...

CVE-2018-18082

XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...

PT-2018-14337

Name of the Vulnerable Software and Affected Versions Waimai Super Cms version 20150505 Description A security issue exists due to the presence of a cross-site scripting XSS flaw. This issue can be exploited via the fname parameter in the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave...

CVE-2018-15570

In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter...

CVE-2018-15570

In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter...

Cross site scripting

In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter...

CVE-2018-15570

The CVE refers to CVE-2018-15570 affecting waimai Super Cms 20150505, with a stored XSS in the /admin.php/Foodcat/editsave fcname parameter. The available connected sources confirm the vulnerability type (stored XSS) and the affected component/parameter, but do not provide explicit patch/version ...

waimai Super Cms Cross Site Scripting Vulnerability

waimai Super Cms is a takeaway ordering system. The system is compatible with IE, Firefox, Chrome, Safari and Opera browsers. A cross-site scripting vulnerability exists in version 20150505 of waimai Super Cms. A remote attacker can exploit this vulnerability by sending the 'fcname' parameter to...

PT-2018-13096

Name of the Vulnerable Software and Affected Versions waimai Super Cms version 20150505 Description The issue concerns a stored XSS vulnerability. It can be triggered via the /admin.php/Foodcat/editsave API endpoint, specifically through the fcname parameter. Recommendations For waimai Super Cms...

CVE-2018-15570: Improper Neutralization of Input During Web Page Generation

In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter...