CVE-2018-16315: Medium – In waimai Super Cms 20150505, there is a CSRF vulnerability that can

CWE Weakness Definitions

CWE-352: Cross-Site Request Forgery (CSRF)

Web application does not verify that a request was intentionally sent by the authenticated user.

Related Attack Patterns (CAPEC)

CAPEC-462 Cross-Domain Search Timing

via CWE-352

CAPEC-467 Cross Site Identification

via CWE-352

CAPEC-62 Cross Site Request Forgery

via CWE-352

CAPEC-111 JSON Hijacking (aka JavaScript Hijacking)

via CWE-352

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A medium severity vulnerability affects Bijiadao systems (CVE-2018-16315). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-335147-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2018-16315?

This vulnerability was disclosed in 2018. A medium severity vulnerability affects Bijiadao systems (CVE-2018-16315). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

What is the CVSS score for CVE-2018-16315?

CVE-2018-16315 has CVSS 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. EPSS: 0.4%.

Is CVE-2018-16315 actively exploited?

No confirmed active exploitation of CVE-2018-16315 as of 2026-05-30.

How do I remediate CVE-2018-16315?

Priority: MONITOR.

What systems are affected by CVE-2018-16315?

CVE-2018-16315 affects Bijiadao Waimai Super Cms.

Vulnerability Details

CVE ID	`CVE-2018-16315`
BSID	`BS-2018-GLOBAL-335147-M` BreachSpider Global ID
CVSS Vector	`CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N`
Published	2018-09-01
Last Modified	2024-11-21
ICS Relevance	0%
Weakness (CWE)	Cross-Site Request Forgery (CSRF)
Source	NVD

Official Description

In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Exploitation Likelihood: MINIMAL

Affected Products

Vendor	Product	Affected Versions
Bijiadao	Waimai Super Cms	`20150505`

Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence

● Threat Intelligence Validated: October 2026 | Threat Age: 2966 Days

CISA known-exploited	Not in KEV catalog
Public Exploit	Not confirmed
PoC Code	Not confirmed

AI Enrichment Record — provenance & audit hash

Model	`rule-based-v1`
Confidence	MEDIUM
Enriched At	2026-05-24
SHA-512 Audit Hash	`80283f3e0d52a926db5014d3b3156ca1b5d61730fc776361f7248ad9ac0c12ef1f9bfc022316392fda80a48b7b4f1a71a4124cd6d520c0e079b7c0f4f2fef6a0`

Related CVEs affecting Bijiadao

CVE-2019-3577 9.8 An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductA... CVE-2019-7585 9.8 An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAc... CVE-2018-18622 6.1 An issue was discovered in Waimai Super Cms 20150505. There is XSS via the in... CVE-2019-7567 6.1 An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=ad... CVE-2018-18261 6.1 In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.ph...

View all Bijiadao CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →