EUVD-2026-1933

Imaster's MEMS Events CRM contains an SQL injection vulnerability in‘keyword’ parameter in ‘/memsdemo/exchangeoffers.php’...

PT-2026-2265

Name of the Vulnerable Software and Affected Versions Imaster MEMS Events CRM affected versions not specified Description The software contains an SQL injection issue in the phone parameter of the '/memsdemo/login.php' API endpoint. This allows for full database access without authentication...