Blind SQL Injection Vulnerability in Waimai Super Cms 20150505

CVE-2019-3577 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.