Lucene search
HistoryJun 05, 2024 - 3:15 p.m.
CVE-2024-36837
crmeb
sql injection
getproductlist
productcontroller.php
remote attacker
sensitive information
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0.003
Percentile
71.8%
SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController.php file.
Affected configurations
Node
crmebcrmebMatch5.2.2
References
Related
nuclei
nuclei
CRMEB v.5.2.2 - SQL Injection
2024-06-18 06:28:35
vulnrichment
vulnrichment
CVE-2024-36837
2024-06-05 00:00:00
cve
cve
CVE-2024-36837
2024-06-05 15:15:11
cvelist
cvelist
CVE-2024-36837
2024-06-05 00:00:00
githubexploit
githubexploit
Exploit for SQL Injection in Crmeb
2024-06-15 16:44:51
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0.003
Percentile
71.8%
Related for NVD:CVE-2024-36837