304 matches found
CVE-2023-1165 Zhong Bang CRMEB Java list sql injection
A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been disclosed to the public and may be used...
CVE-2023-1165 Zhong Bang CRMEB Java list sql injection
A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been disclosed to the public and may be used...
CVE-2023-1165
CVE-2023-1165 affects Zhong Bang CRMEB Java 1.3.4. The issue resides in the /api/admin/system/store/order/list endpoint, where manipulating the keywords parameter leads to SQL injection. Multiple sources confirm a critical vulnerability with exploit having been disclosed publicly. No patch/versio...
Zhongbang CRMEB SQL注入漏洞
Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. Zhong Bang CRMEB Java version 1.3.4 suffers from a SQL injection vulnerability, which stems from the operation of the parameter keywords can lead to sql injection...
CVE-2022-44343
CRMEB 4.4.4 is vulnerable to Any File download...
Design/Logic Flaw
CRMEB 4.4.4 is vulnerable to Any File download...
CVE-2022-44343
CRMEB 4.4.4 is vulnerable to Any File download...
Zhongbang CRMEB 安全漏洞
Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Xi'an, China. A security vulnerability exists in CRMEB version 4.4.4, which is caused by an arbitrary file download...
CVE-2022-44343
CRMEB 4.4.4 is reported vulnerable to an Any File download vulnerability (arbitrary file download). The CVSS 3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW complexity, no privileges required, no user interaction, affecting confidentiality. The available documents confirm the issue b...
CVE-2022-44343
CRMEB 4.4.4 is vulnerable to Any File download...
CVE-2022-44343
CRMEB 4.4.4 is vulnerable to Any File download...
CRMEB Arbitrary File Upload (CVE-2020-21787)
An arbitrary file upload vulnerability exists in CRMEB. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Zhongbang CRMEB SQL Injection Vulnerability
Zhongbang CRMEB is an open source e-commerce management system of China Xi'an Zhongbang Network Zhongbang Company. Zhongbang CRMEB Mall System There is a SQL injection vulnerability in Zhongbang CRMEB Mall System V2.60 and V3.1 via the SQL injection vulnerability in the tablename parameter in...
CVE-2020-21394
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...
CVE-2020-21394
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...
Sql injection
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...
CVE-2020-21394
The CVE-2020-21394 entry applies to Zhongbang CRMEB Mall System (open source) v2.60 and v3.1, where SQL injection is possible through the tablename parameter in SystemDatabackup.php. The underlying issue is a SQL injection vulnerability that can lead to unauthorized SQL commands with high impact ...
CVE-2020-21394
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...
crmeb server-side request forgery vulnerability
Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. A security vulnerability exists in CRMEB 3.1.0+, which stems from the strict domain name filtering in CRMEB 3.1.0+ leading to SSRF Server Side Request Forgery. No detailed vulnerabili...