Waimai Super Cms@20150505 Security Vulnerabilities and Issues — Waimai Super Cms@20150505 CVE List

Lucene search

BijiadaoWaimai Super Cms20150505

5 matches found

CVE•added 2018/10/09 6:29 p.m.•34 views

CVE-2018-18082

XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI.

6.1CVSS6AI score0.0024EPSS

CVE•added 2018/09/01 6:29 p.m.•31 views

CVE-2018-16315

In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add.

6.5CVSS6.5AI score0.00117EPSS

CVE•added 2018/10/23 6:29 p.m.•31 views

CVE-2018-18622

An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2018/08/30 1:29 p.m.•30 views

CVE-2018-16157

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=cart&a=save item_totals parameter to zero, the entire cart is sold for free.

5.3CVSS5.2AI score0.00198EPSS

CVE•added 2018/08/20 1:29 a.m.•26 views

CVE-2018-15570

In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter.

4.8CVSS4.8AI score0.00235EPSS