MAL-2025-11223 Malicious code in @zalastax/nolb-dsr-package-public-a (npm)

The package @zalastax/nolb-dsr-package-public-a was found to contain malicious code...

CVE-2020-21504: Improper Neutralization of Input During Web Page Generation

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?&m=Public&a=login...

CVE-2019-7585: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI...

CVE-2018-18622: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter...