Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
crmeb crmeb vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2023-3234
A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. It has been declared as problematic. Affected by this vulnerability is the function put_image of the file api/controller/v1/PublicController.php. The manipulation leads to deserialization. The attack can be launched remot...
Crmeb Crmeb
9.8
CVSSv3
CVE-2023-3232
A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and classified as critical. This issue affects some unknown processing of the file /api/wechat/app_auth of the component Image Upload. The manipulation leads to deserialization. The exploit has been disclosed to the public...
Crmeb Crmeb
9.8
CVSSv3
CVE-2023-30185
CRMEB v4.4 to v4.6 exists to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php.
Crmeb Crmeb
9.8
CVSSv3
CVE-2023-1608
A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability affects the function getAdminList of the file /api/admin/store/product/list. The manipulation of the argument cateId leads to sql injection. The attack can be init...
Crmeb Crmeb Java
9.8
CVSSv3
CVE-2020-21787
CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.
Crmeb Crmeb 3.1.0\\+
9.8
CVSSv3
CVE-2020-25466
A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code.
Crmeb Crmeb 3.0
8.8
CVSSv3
CVE-2023-3233
A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. It has been classified as critical. Affected is the function get_image_base64 of the file api/controller/v1/PublicController.php. The manipulation leads to server-side request forgery. It is possible to launch the attack ...
Crmeb Crmeb
8.8
CVSSv3
CVE-2020-21394
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php.
Crmeb Crmeb 2.60
Crmeb Crmeb 3.1
7.5
CVSSv3
CVE-2022-44343
CRMEB 4.4.4 is vulnerable to Any File download.
Crmeb Crmeb 4.4.4
7.2
CVSSv3
CVE-2023-2419
A vulnerability was found in Zhong Bang CRMEB 4.6.0. It has been declared as critical. This vulnerability affects the function videoUpload of the file \crmeb\app\services\system\attachment\SystemAttachmentServices.php. The manipulation of the argument filename leads to unrestrict...
Crmeb Crmeb 4.6.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380
CVE-2024-1694
local file inclusion
CVE-2024-5645
CVE-2024-24919
XSS
CVE-2024-36774
CVE-2024-21306
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »