CVE-2019-3577: Bijiadao Waimai Super CMS

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI.

Affected products

• Bijiadao Waimai Super CMS: version 20150505 only

Published 2019-01-02. Last modified 2026-06-17.