129 matches found
CVE-2019-7567
CVE-2019-7567 affects Waimai Super Cms 20150505. The vulnerability is a reflected XSS in the admin panel: admin.php?m=Member&a=adminaddsave, triggered via the username or password parameter. The NVD notes a medium severity (CVSS v3.0 base score 6.1) with network attack vector and user interaction...
CVE-2019-7567
An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter...
Sql injection
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id0 parameter to the /product URI...
CVE-2019-3577
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id0 parameter to the /product URI...
CVE-2019-3577
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id0 parameter to the /product URI...
CVE-2019-3577
CVE-2019-3577 affects Waimai Super Cms 20150505. The vulnerability is a blind SQL injection in the file web/Lib/Action/ProductAction.class.php, exploitable via the id[0] parameter on the /product endpoint. Source documents do not provide patches or remediation steps. CWE/Details: blind SQL inject...
CVE-2019-3577
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id0 parameter to the /product URI...
Waimai Super Cms Cross-Site Scripting Vulnerability (CNVD-2018-21792)
waimai Super Cms is a takeaway ordering system. The system is compatible with IE, Firefox, Chrome, Safari and Opera browsers. A cross-site scripting vulnerability exists in version 20150505 of Waimai Super Cms. A remote attacker can exploit this vulnerability by sending the 'username' parameter t...
CVE-2018-18622
An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter...
Design/Logic Flaw
An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter...
CVE-2018-18622
An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter...
CVE-2018-18622
An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter...
CVE-2018-18622
CVE-2018-18622 affects Waimai Super Cms 20150505. The issue is a Cross-Site Scripting (XSS) vulnerability exploitable through the username parameter in index.php?m=public&a=doregister, as reported by multiple sources (Red Hat, CNVD, NVD). Root cause is unsanitized input that allows injection of s...
Cross site scripting
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...
CVE-2018-18082
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...
CVE-2018-18082
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...
CVE-2018-18082
CVE-2018-18082 is a cross-site scripting vulnerability in Waimai Super Cms 20150505. The issue arises through the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URIs, allowing injection of arbitrary web script/HTML. The connected CNVD/NVD entries confirm the affe...
CVE-2018-18082
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...