95 matches found
Waimai Super Cms 跨站脚本漏洞
Waimai Super Cms is a takeaway ordering system. A cross-site scripting vulnerability exists in waimai Super Cms, which stems from the product's /admin.php/Link/addsave link failing to properly handle input data. An attacker could use this vulnerability to cause client-side code execution. The...
Waimai Super Cms 跨站脚本漏洞
Waimai Super Cms is a takeaway ordering system. A cross-site scripting vulnerability exists in waimai Super Cms, which stems from the product's /admin.php?m=Config&a=add link failing to properly handle input data. An attacker could use this vulnerability to cause client-side code execution. The...
Waimai Super Cms 处理逻辑错误漏洞
Waimai Super Cms is a takeout ordering system. A processing logic error vulnerability exists in Waimai Super Cms that stems from an improper implementation of the processing logic for the product index.php?m=gift&a=addsave link. The vulnerability can be exploited to modify the data captured in a...
CVE-2018-18261
In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...
CVE-2018-18261
In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...
Cross site scripting
In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...
CVE-2018-18261
CVE-2018-18261 affects waimai Super Cms 20150505. A Cross-Site Scripting (XSS) vulnerability exists via the /admin.php/Foodcat/addsave fcname parameter. The issue arises from improper handling/validation of input, allowing injected scripts to be reflected to users. References in Red Hat and NVD c...
CVE-2018-18261
In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...
CVE-2019-7585
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI...
Sql injection
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI...
CVE-2019-7585
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI...
CVE-2019-7585
CVE-2019-7585 affects Waimai Super Cms 20150505. The vulnerability is a time-based SQL Injection in web/Lib/Action/PublicAction.class.php via the array parameter passed to the /index.php?m=public&a=checkemail URI. In the NVD entry it shows high to critical impact depending on CVSS version (CVSS‑2...
CVE-2019-7585
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI...
CVE-2019-7567
An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter...
Cross site scripting
An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter...
CVE-2019-7567
An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter...
CVE-2019-7567
CVE-2019-7567 affects Waimai Super Cms 20150505. The vulnerability is a reflected XSS in the admin panel: admin.php?m=Member&a=adminaddsave, triggered via the username or password parameter. The NVD notes a medium severity (CVSS v3.0 base score 6.1) with network attack vector and user interaction...
CVE-2019-7567
An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter...