2019-01-01

2019-01-02

2019-01-03

All (2) Critical (2) High (2) Medium (3)

CVE-2019-3577 Jan 02, 17:29 CRITICAL Act Now

An issue was discovered in Waimai Super Cms 20150505. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Waimai Super Cms Bijiadao

NVD GitHub

CVSS 3.0

9.8

EPSS

1.1%

CVE-2019-3576 Jan 02, 17:29 CRITICAL Act Now

inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java Information Disclosure SQLi Inxedu

NVD

CVSS 3.0

9.8

EPSS

1.5%