Description
Imaster's MEMS Events CRM contains an SQL injection vulnerability in ‘phone’ parameter in ‘/memsdemo/login.php’.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Imaster | MEMS Events CRM | All versions | — |
Critical · 9.3
CVE-2025-41006
EUVD-2026-1937GHSA-4jj6-9r93-mpjw
Multiple vulnerabilities in Imaster products Open configuration options
Published Jan 12, 2026 · Updated Jan 12, 2026 · Assigned by INCIBE