Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Bijiadao records in CISA KEVNo Bijiadao vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 45
An issue was discovered in Waimai Super Cms 20150505.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01452 · Published 2019-02-07 · No fix listed CWE-89
Priority MEDIUM 44
An issue was discovered in Waimai Super Cms 20150505.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01072 · Published 2019-01-02 · No fix listed CWE-89
Priority LOW 29
An issue was discovered in Waimai Super Cms 20150505.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00826 · Published 2019-02-07 · No fix listed CWE-79
Priority LOW 29
In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00752 · Published 2019-04-14 · No fix listed CWE-79
Priority LOW 29
In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00447 · Published 2018-09-01 · No fix listed CWE-352
Priority LOW 28
An issue was discovered in Waimai Super Cms 20150505.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00675 · Published 2018-10-23 · No fix listed CWE-79
Priority LOW 28
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00675 · Published 2018-10-09 · No fix listed CWE-79
Priority LOW 25
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00735 · Published 2018-08-30 · No fix listed
Priority LOW 23
In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00518 · Published 2018-08-20 · No fix listed CWE-79
Open these records in search →