Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2020-21504
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.
0
Attacker Value
Unknown
CVE-2020-21505
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.
0
Attacker Value
Unknown
CVE-2020-21503
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.
0
Attacker Value
Unknown
CVE-2020-21506
Disclosure Date: October 05, 2021 (last updated February 23, 2025)
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.
0
