Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
waimai super cms vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2020-21503
waimai Super Cms 20150505 has a logic flaw allowing malicious users to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.
Waimai Super Cms Project Waimai Super Cms 20150505
6.1
CVSSv3
CVE-2020-21504
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.
Waimai Super Cms Project Waimai Super Cms 20150505
6.1
CVSSv3
CVE-2020-21505
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.
Waimai Super Cms Project Waimai Super Cms 20150505
6.1
CVSSv3
CVE-2020-21506
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.
Waimai Super Cms Project Waimai Super Cms 20150505
6.1
CVSSv3
CVE-2018-18261
In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter.
Bijiadao Waimai Super Cms 20150505
9.8
CVSSv3
CVE-2019-7585
An issue exists in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI.
Bijiadao Waimai Super Cms 20150505
6.1
CVSSv3
CVE-2019-7567
An issue exists in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter.
Bijiadao Waimai Super Cms 20150505
9.8
CVSSv3
CVE-2019-3577
An issue exists in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI.
Bijiadao Waimai Super Cms 20150505
6.1
CVSSv3
CVE-2018-18622
An issue exists in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter.
Bijiadao Waimai Super Cms 20150505
6.1
CVSSv3
CVE-2018-18082
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI.
Bijiadao Waimai Super Cms 20150505
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »