CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2019-7585
https://notcve.org/view.php?id=CVE-2019-7585
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI. Se ha descubierto un problema en Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php permite una inyección SQL basada en tiempo mediante el parámetro param array en el URI /index.php?m=publica=checkemail. • https://github.com/caokang/waimai/issues/11 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2019-7567
https://notcve.org/view.php?id=CVE-2019-7567
An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter. Se ha descubierto un problema en Waimai Super Cms 20150505. admin.php?m=Membera=adminaddsave tiene Cross-Site Scripting (XSS) mediante los parámetros username o password. • https://github.com/caokang/waimai/issues/10 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-3577
https://notcve.org/view.php?id=CVE-2019-3577
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI. Se ha descubierto un problema en Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php permite inyecciones SQL a ciegas mediante el parámetro id[0] en el URI /product. • https://github.com/caokang/waimai/issues/9 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2018-18622
https://notcve.org/view.php?id=CVE-2018-18622
An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter. Se ha descubierto un problema en Waimai Super Cms 20150505. Hay Cross-Site Scripting (XSS) mediante el parámetro username en index.php? • https://github.com/caokang/waimai/issues/8 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2018-18082
https://notcve.org/view.php?id=CVE-2018-18082
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI. Existe Cross-Site Scripting (XSS) en Waimai Super Cms 20150505 mediante el parámetro fname en los URI admin.php?m=Fooda=addsave o admin.php? • https://github.com/caokang/waimai/issues/6 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •