CVE-2023-1165 Zhong Bang CRMEB Java list sql injection

A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-1165

CVE-2023-1165 affects Zhong Bang CRMEB Java 1.3.4. The issue resides in the /api/admin/system/store/order/list endpoint, where manipulating the keywords parameter leads to SQL injection. Multiple sources confirm a critical vulnerability with exploit having been disclosed publicly. No patch/versio...