129 matches found
CVE-2018-17391
SQL Injection exists in authorspost.php in Super Cms Blog Pro 1.0 via the author parameter...
Super Cms Blog Pro SQL Injection Vulnerability
Super Cms Blog Pro is a personal blogging system. A SQL injection vulnerability exists in Super Cms Blog Pro version 1.0. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...
CVE-2018-17391
CVE-2018-17391 describes an SQL injection in Super Cms Blog Pro 1.0, exploitable via the authors_post.php?author= parameter. Multiple sources (NVD, CVE list, CNVD, Prion, CIRCL) reference the same vulnerability with the same affected component and entry. Public exploit and proof-of-concept activi...
Super Cms Blog Pro 1.0 SQL Injection
Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://coolscript.cf/ Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-17391 Exploit Author: Ihsan...
Super Cms Blog Pro 1.0 - SQL Injection
Super Cms Blog Pro 1.0 - SQL Injection Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://coolscript.cf/ Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...
Super Cms Blog Pro 1.0 - SQL Injection
Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://coolscript.cf/ Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-17391 Exploit Author: Ihsan...
waimai Super Cms Cross-Site Request Forgery Vulnerability (CNVD-2018-19089)
waimai Super Cms is a takeaway ordering system. The system is compatible with IE, Firefox, Chrome, Safari and Opera browsers. A cross-site request forgery vulnerability exists in waimai Super Cms 20150505, which can be exploited by a remote attacker to change the configuration with the help of th...
CVE-2018-16315
In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add...
CVE-2018-16315
In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add...
Design/Logic Flaw
In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add...
CVE-2018-16315
In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add...
CVE-2018-16315
CVE-2018-16315 affects waimai Super Cms 20150505 with a CSRF weakness that allows an attacker to alter configuration through admin.php?m=Config&a=add. The CNVD/CVE records describe remote exploitation that enables configuration changes via crafted requests; NVD notes CSRF vector affecting configu...
Design/Logic Flaw
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=cart&a=save itemtotals parameter to zero, the entire cart is sold for free...
CVE-2018-16157
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=cart&a=save itemtotals parameter to zero, the entire cart is sold for free...
CVE-2018-16157
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=cart&a=save itemtotals parameter to zero, the entire cart is sold for free...
CVE-2018-16157
The CVE-2018-16157 entry describes a logic flaw in waimai Super Cms 20150505 where attackers can modify the price before form submission by observing data in a packet capture. By setting the index.php?m=cart&a=save item_totals parameter to zero, the entire cart can be sold for free. The available...
CVE-2018-15570
In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter...
CVE-2018-15570
In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter...