Sql injection

A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability affects the function getAdminList of the file /api/admin/store/product/list. The manipulation of the argument cateId leads to sql injection. The attack can be initiated remotely. T...

CVE-2023-1608

CVE-2023-1608 affects Zhong Bang CRMEB Java up to version 1.3.4. The vulnerability lies in the getAdminList function of /api/admin/store/product/list, where improper handling of the cateId parameter enables SQL injection. This can be exploited remotely; the exploit has been disclosed publicly per...