Weimai Wetapp
Approved changes feed: RSS · Atom
cpe:2.3:a:xierongwkhd:weimai-wetapp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Xierongwkhd (f9a4de69-4671-5057-8ff2-3909071c05df) |
|---|---|
| Product | Weimai Wetapp (8bd3eef2-6c59-51ef-b050-7f69c2e2fb58) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3957 |
vulnerable | 2026-06-08 08:01:19.705442 |
xierongwkhd weimai-wetapp Endpoint HomeController.java getLikeMovieList sql injection
MEDIUM (4.7)
A flaw has been found in xierongwkhd weimai-wetapp up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2. This vulnerability affects the function getLikeMovieList of the file source-code/src/main/java/com/moke/wp/wx_weimai/controller/HomeController.java of the component Endpoint. Executing a manipulation of the argument cat can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-03-11T21:02:08.710Z
Updated: 2026-03-12T14:19:35.337Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3956 |
vulnerable | 2026-06-08 08:01:19.704934 |
xierongwkhd weimai-wetapp Admin_AdminUserController.java getAdmins sql injection
MEDIUM (4.7)
A vulnerability was detected in xierongwkhd weimai-wetapp up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2. This affects the function getAdmins of the file source-code/src/main/java/com/moke/wp/wx_weimai/controller/admin/Admin_AdminUserController.java. Performing a manipulation of the argument keyword results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-03-11T20:32:11.450Z
Updated: 2026-03-12T13:59:53.903Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.