CVE-2024-36837

CVE-2024-36837 / \tCNVD-2024-30128 POC escribe la URL en url.txt y ejecuta CVE-2024-36837.py CVE-2024-36837 En mi primer año de universidad, descubrí que una institución educativa usaba CRMEB Mall como tienda en línea en una acción de protección de Internet. Después de las pruebas, se encontró un...

EUVD-2025-7683

Malicious code in bioql PyPI...

CVE-2025-25763

crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...

CVE-2025-25763

crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...

CVE-2025-25763

crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...

CVE-2025-25763

The open-source e-commerce management system crmeb (CRMEB-KY) versions v5.4.0 and earlier is vulnerable to a SQL Injection (CWE-89). The root cause is located in the getRead() function within the /system/SystemDatabackupServices.php file. This vulnerability could allow an attacker to execute arbi...

CVE-2025-25763

crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...

CVE-2025-25763

crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...

CVE-2025-25763: Improper Neutralization of Special Elements used in an SQL Command

crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...