4 matches found
CVE-2025-25763: Improper Neutralization of Special Elements used in an SQL Command
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...
ZhongBangKeJi CRMEB SQL Injection Vulnerability
ZhongBangKeJi CRMEB is an open source e-commerce management system from China ZhongBang Technology ZhongBangKeJi. A security vulnerability exists in ZhongBangKeJi CRMEB v5.4.0 and earlier versions, which originates from the getRead function in /system/SystemDatabackupServices.php that is...
PT-2025-10006
Name of the Vulnerable Software and Affected Versions crmeb versions 5.4.0 and earlier Description The issue is related to a SQL Injection vulnerability. It is located at the getRead function in the /system/SystemDatabackupServices.php file. Recommendations For crmeb versions 5.4.0 and earlier,...