Lucene search
K

43 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2002-1336

Malware in sbrugna...

5CVSS6.4AI score0.00538EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-2281

Malware in sbrugna...

7.8CVSS6.4AI score0.00218EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2004-1206

Malware in sbrugna...

5CVSS6.4AI score0.00336EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-8011

Malware in sbrugna...

5.3CVSS5.5AI score0.00198EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-14273

Malware in sbrugna...

7.5CVSS7.5AI score0.00237EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2000-0913

Malware in sbrugna...

7.5CVSS6.4AI score0.0681EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-20371

Malware in sbrugna...

7.5CVSS7.6AI score0.00237EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2004-0681

Malware in sbrugna...

7.5CVSS6.4AI score0.03062EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2002-2280

Malware in sbrugna...

6.4CVSS6.4AI score0.00381EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 3:49 p.m.3 views

CVE-2020-21503

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift=addsave credit parameter to -1, the product is sold for free...

7.5CVSS6.8AI score0.00237EPSS
Exploits1
OSV
OSV
added 2023/06/07 2:15 a.m.0 views

CVE-2023-3125

The B2BKing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'b2bkingsavepriceimport' function in versions up to, and including, 4.6.00. This makes it possible for Authenticated attackers with subscriber or customer-level permissions...

6.5CVSS7.3AI score0.00112EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/06/07 12:0 a.m.1 views

PT-2023-12487 · WordPress · Woocommerce Multi Currency

Name of the Vulnerable Software and Affected Versions: WooCommerce Multi Currency plugin for WordPress versions up to and including 2.1.17 Description: The issue allows authenticated attackers to modify product prices to arbitrary values due to missing authorization. Recommendations: For versions...

4.3CVSS4.6AI score0.00127EPSS
Exploits0References6
Prion
Prion
added 2021/10/05 10:15 p.m.9 views

Design/Logic Flaw

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free...

5CVSS7.5AI score0.00237EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/10/05 9:32 p.m.44 views

CVE-2020-21503

Waimai Super Cms 20150505 contains a logic flaw in the purchase flow: by manipulating the price parameter via the URL index.php?m=gift&a=addsave with credit set to -1, an attacker can obtain a free product before form submission. Multiple sources (NVD CVE-2020-21503, Red Hat, CNNNVD, CNNVD, CVE l...

7.5CVSS7.4AI score0.00237EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/10/05 9:32 p.m.13 views

CVE-2020-21503

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free...

7.5AI score0.00237EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/10/05 12:0 a.m.1 views

Waimai Super Cms 处理逻辑错误漏洞

Waimai Super Cms is a takeout ordering system. A processing logic error vulnerability exists in Waimai Super Cms that stems from an improper implementation of the processing logic for the product index.php?m=gift&a=addsave link. The vulnerability can be exploited to modify the data captured in a...

7.5CVSS7.3AI score0.00237EPSS
Exploits1References2
NVD
NVD
added 2018/08/30 1:29 p.m.8 views

CVE-2018-16157

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=cart&a=save itemtotals parameter to zero, the entire cart is sold for free...

5.3CVSS5.2AI score0.00198EPSS
Exploits1References1
Prion
Prion
added 2018/08/30 1:29 p.m.12 views

Design/Logic Flaw

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=cart&a=save itemtotals parameter to zero, the entire cart is sold for free...

5CVSS5.2AI score0.00198EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2018/08/30 1:0 p.m.35 views

CVE-2018-16157

The CVE-2018-16157 entry describes a logic flaw in waimai Super Cms 20150505 where attackers can modify the price before form submission by observing data in a packet capture. By setting the index.php?m=cart&a=save item_totals parameter to zero, the entire cart can be sold for free. The available...

5.3CVSS5.2AI score0.00198EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2018/08/30 1:0 p.m.15 views

CVE-2018-16157

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=cart&a=save itemtotals parameter to zero, the entire cart is sold for free...

5.3AI score0.00198EPSS
Exploits1References1
Rows per page
Query Builder