EUVD-2023-43910

Malicious code in bioql PyPI...

Deserialization of untrusted data

A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. It has been declared as problematic. Affected by this vulnerability is the function putimage of the file api/controller/v1/PublicController.php. The manipulation leads to deserialization. The attack can be launched remotely. The exploit h...

CVE-2023-3234

CVE-2023-3234 affects Zhong Bang CRMEB up to version 4.6.0. The vulnerability resides in the function put_image of api/controller/v1/PublicController.php, where manipulation leads to deserialization. It can be exploited remotely and the public exploit has been disclosed. Connected references indi...