Waimai Super Cms@20150505 Security Vulnerabilities and Issues — Waimai Super Cms@20150505 CVE List

Lucene search

BijiadaoWaimai Super Cms20150505

4 matches found

CVE•added 2019/02/07 7:29 a.m.•44 views

CVE-2019-7567

An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter.

6.1CVSS6AI score0.0024EPSS

CVE•added 2019/01/02 5:29 p.m.•31 views

CVE-2019-3577

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI.

9.8CVSS9.7AI score0.00264EPSS

CVE•added 2019/02/07 6:29 p.m.•29 views

CVE-2019-7585

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI.

9.8CVSS9.7AI score0.00264EPSS

CVE•added 2019/04/15 12:31 p.m.•27 views

CVE-2018-18261

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter.

6.1CVSS6AI score0.00223EPSS