Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
super cms vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2019-7585
An issue exists in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI.
Bijiadao Waimai Super Cms 20150505
4.3
CVSSv2
CVE-2019-7567
An issue exists in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter.
Bijiadao Waimai Super Cms 20150505
7.5
CVSSv2
CVE-2019-3577
An issue exists in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI.
Bijiadao Waimai Super Cms 20150505
6.8
CVSSv2
CVE-2018-18711
An issue exists in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's password via index.php?m=core&f=panel&v=edit_info.