Unrestricted file upload

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php...

CVE-2020-21787

CVE-2020-21787 concerns CRMEB 3.1.0+ where the UploadService.php endpoint exposes a vulnerable file upload path (/crmeb/crmeb/services/UploadService.php) that can be abused to achieve a getshell. The NVD entry documents a high-severity vulnerability with CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H...

CVE-2020-21787

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php...

CVE-2020-21788

In CRMEB 3.1.0+ strict domain name filtering leads to SSRFServer-Side Request Forgery. The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php...

CVE-2020-21788

The vulnerability CVE-2020-21788 affects CRMEB 3.1.0+ where strict domain name filtering enables SSRF. The vulnerable code is in /crmeb/app/admin/controller/store/CopyTaobao.php. No exploit details or official remediation are provided in the connected documents; exploitation status is not describ...

Zhongbang CRMEB 代码问题漏洞

Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. A security vulnerability exists in CRMEB 3.1.0+, which causes a file upload vulnerability via the CRMEB service upload service...

CRMEB Min open source mall suffers from an arbitrary file read vulnerability

CRMEB Min open source mall is a front and back end separation of open source e-commerce system . CRMEB Min open source mall has an arbitrary file read vulnerability. An attacker can use this vulnerability to read any file on the server...

Command Execution Vulnerability in CRMEB Min Open Source Mall

CRMEB Min open source mall is a front and back end separation of open source e-commerce system . A command execution vulnerability exists in CRMEB Min Open Source Mall. An attacker can exploit this vulnerability to obtain server administrative privileges...

Command execution vulnerability in CRMEB Min open source mall (CNVD-2021-34043)

CRMEB brand new a lightweight, high-performance open source e-commerce system . CRMEB Min open source mall there is a command execution vulnerability , an attacker can exploit the vulnerability to obtain server administrative privileges...

Command Execution Vulnerability in CRMEB Min Open Source Mall

CRMEB Min open source mall is a front and back end separation of open source e-commerce system . A command execution vulnerability exists in CRMEB Min Open Source Mall. An attacker can exploit this vulnerability to obtain server administrative privileges...

Command Execution Vulnerability in CRMEB Breakthrough Version

CRMEB mall system is based on ThinkPhp6.0 Vue development of a set of new retail mobile e-commerce system, CRMEB system is a set of customer relationship management marketing e-commerce system, can quickly accumulate customers, member data analysis, intelligent conversion of customers, effectivel...

File Upload Vulnerability in CRMEB Knowledge Payment System Backend

CRMEB based on ThinkPhp5.0 + Vue + EasyWeChat development of a CRMEB new retail mall system. A file upload vulnerability exists in the backend of CRMEB Knowledge Payment System, which can be exploited by attackers to gain control of the server...

Zhongbang CRMEB server-side request forgery vulnerability

Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. CRMEB version 3.0 has a server-side request forgery vulnerability , the vulnerability stems from the downloadimage interface SSRF vulnerability , you can remotely download any file on...

CVE-2020-25466

A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code...

Server side request forgery (ssrf)

A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code...

CVE-2020-25466

CRMEB 3.0 has an SSRF vulnerability in the downloadimage interface that can remotely download arbitrary files on the server and remotely execute arbitrary code. The connected documents explicitly identify this as a server-side request forgery in the CRMEB 3.0 downloadimage endpoint, enabling arbi...

CVE-2020-25466

A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code...

File Upload Vulnerability in CRMEB Open Edition V3.1.0

CRMEB mall system is based on ThinkPhp6.0 + Vue development of a set of new retail mobile e-commerce system, CRMEB system is a set of customer relationship management + marketing e-commerce system, can quickly accumulate customers, member data analysis, intelligent conversion of customers,...

File upload vulnerability exists in CRMEB Open Edition V2.6.13.

CRMEB mall system is based on ThinkPhp6.0 + Vue development of a set of new retail mobile e-commerce system, CRMEB system is a set of customer relationship management + marketing e-commerce system, can quickly accumulate customers, member data analysis, intelligent conversion of customers,...

Code Execution Vulnerability in CRMEB Open Edition V2.6.13

CRMEB system is a set of customer relationship management + marketing e-commerce system, can really help enterprises based on WeChat public number, small program, to realize the member relationship management, data analysis, accurate marketing e-commerce management system. CRMEB Open Version...