CVE-2019-7585: Bijiadao Waimai Super CMS

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI.

Affected products

• Bijiadao Waimai Super CMS: version 20150505 only

Published 2019-02-07. Last modified 2026-06-17.