Lucene search
HistoryJun 05, 2024 - 3:15 p.m.
CVE-2024-36837
cve-2024-36837
sql injection
crmeb v.5.2.2
getproductlist function
productcontroller.php
remote attacker
sensitive information
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.3%
SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController.php file.
Affected configurations
Node
crmebcrmebMatch5.2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| crmeb:crmeb | crmeb | eq | 5.2.2 |
References
Related
nvd
nvd
CVE-2024-36837
2024-06-05 15:15:11
nuclei
nuclei
CRMEB v.5.2.2 - SQL Injection
2024-06-18 06:28:35
cvelist
cvelist
CVE-2024-36837
2024-06-05 00:00:00
vulnrichment
vulnrichment
CVE-2024-36837
1976-01-01 00:00:00
githubexploit
githubexploit
Exploit for SQL Injection in Crmeb
2024-06-15 16:44:51
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.3%
Related for CVE-2024-36837