Vulnerabilities

TI-2018-12909 CVE-2018-18261 · GHSA-gwcv-vcq8-h7vc

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter.

LOW 29

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00752 Published 2019-04-14 No fix listed CWE-79

TI-2019-05355 CVE-2019-7585 · GHSA-q5jq-r8c6-hm6v

MEDIUM 45

An issue was discovered in Waimai Super Cms 20150505.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01452 Published 2019-02-07 No fix listed CWE-89

TI-2019-05340 CVE-2019-7567 · GHSA-3hvq-cj99-ppq5

LOW 29

An issue was discovered in Waimai Super Cms 20150505.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00826 Published 2019-02-07 No fix listed CWE-79

TI-2019-02642 CVE-2019-3577 · GHSA-cgcv-5cq8-69mv

MEDIUM 44

An issue was discovered in Waimai Super Cms 20150505.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01072 Published 2019-01-02 No fix listed CWE-89

TI-2018-13163 CVE-2018-18622 · GHSA-hcph-jg6m-3wrx

LOW 28

An issue was discovered in Waimai Super Cms 20150505.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2018-10-23 No fix listed CWE-79

TI-2018-12848 CVE-2018-18082 · GHSA-3m74-4hwr-2c58

LOW 28

XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2018-10-09 No fix listed CWE-79

TI-2018-11686 CVE-2018-16315 · GHSA-f93f-gwg4-7g2c

LOW 29

In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00447 Published 2018-09-01 No fix listed CWE-352

TI-2018-11554 CVE-2018-16157 · GHSA-59m4-cw7c-c323

LOW 25

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00735 Published 2018-08-30 No fix listed

TI-2018-11105 CVE-2018-15570 · GHSA-j66j-6mgv-px39

LOW 23

In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00518 Published 2018-08-20 No fix listed CWE-79