Skip to content
OpenAdvisories

Product · Zhong Bang

CRMEB Java

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-1608

    Zhong Bang CRMEB Java list getAdminList sql injection

    A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability affects the function getAdminList of the file /api/admin/store/product/list. The manipulation of the argument cateId leads to sql injection. T…

    Zhong Bang CRMEB Java
  • Medium 5.5
    CVE-2023-1165

    Zhong Bang CRMEB Java list sql injection

    A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been d…

    Zhong Bang CRMEB Java