Lucene search
PRIOn knowledge basePRION:CVE-2023-1608HistoryMar 23, 2023 - 8:15 p.m.
Sql injection
2023-03-2320:15:00
PRIOn knowledge base
www.prio-n.com
2
zhong bang crmeb java
sql injection
getadminlist
remote attack
vdb-223738
A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability affects the function getAdminList of the file /api/admin/store/product/list. The manipulation of the argument cateId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-223738 is the identifier assigned to this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| crmeb_java | le | 1.3.4 |
Related
cve
cve
CVE-2023-1608
2023-03-23 20:15:14
osv
osv
CVE-2023-1608
2023-03-23 20:15:14
cvelist
cvelist
CVE-2023-1608 Zhong Bang CRMEB Java list getAdminList sql injection
2023-03-23 19:31:04
nvd
nvd
CVE-2023-1608
2023-03-23 20:15:14