CVE-2024-52726

CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...

CVE-2024-52726

The ZhongBangKeJi CRMEB open source e-commerce management system, specifically version 5.4.0 , is vulnerable to an arbitrary file read vulnerability. The flaw exists within the save_basics function, which can be exploited by an attacker to obtain sensitive information . At this time, no updated v...

PT-2024-35421 · Crmeb · Crmeb

Name of the Vulnerable Software and Affected Versions: CRMEB version 5.4.0 Description: The issue allows an attacker to obtain sensitive information through an arbitrary file read in the save basics function. Recommendations: For CRMEB version 5.4.0, consider restricting access to the save basics...