Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2020-21504
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.
0
Attacker Value
Unknown
CVE-2020-21505
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.
0
Attacker Value
Unknown
CVE-2020-21503
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.
0
Attacker Value
Unknown
CVE-2020-21506
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.
0
Attacker Value
Unknown
CVE-2018-17391
Disclosure Date: September 28, 2018 (last updated November 27, 2024)
SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.
0
Attacker Value
Unknown
CVE-2018-14014
Disclosure Date: July 12, 2018 (last updated November 27, 2024)
In waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via admin.php?m=Member&a=adminadd.
0
