9 matches found
CVE-2024-36837
CVE-2024-36837 / CNVD-2024-30128 POC write URL in url.txt and run CVE-2024-36837.py CVE-2024-36837 In my freshman year, I found that an educational institution used CRMEB Mall as an online store in an Internet protection action. After testing, sql injection vulnerability was found. After setting ...
EUVD-2025-7683
Malicious code in bioql PyPI...
CVE-2025-25763
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...
CVE-2025-25763
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...
CVE-2025-25763
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...
CVE-2025-25763
The crmeb CRMEB-KY open source e-commerce management system, versions v5.4.0 and before , is vulnerable to a SQL Injection vulnerability. The flaw is located within the getRead() function in the /system/SystemDatabackupServices.php file. This vulnerability could allow an attacker to execute arbit...
CVE-2025-25763
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...
CVE-2025-25763: Improper Neutralization of Special Elements used in an SQL Command
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...