4 matches found
CVE-2025-25763
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...
9.8CVSS8.4AI score0.00943EPSS
SaveExploits0References1
CVE-2025-25763
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...
0.00943EPSS
SaveExploits0References2
CVE-2025-25763
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...
8.4AI score0.00943EPSS
SaveExploits0References2
CVE-2025-25763
The open-source e-commerce management system crmeb (CRMEB-KY) versions v5.4.0 and earlier is vulnerable to a SQL Injection (CWE-89). The root cause is located in the getRead() function within the /system/SystemDatabackupServices.php file. This vulnerability could allow an attacker to execute arbi...
9.8CVSS8.4AI score0.00943EPSS
SaveExploits0References2Affected Software1
20