CRMEB Java vulnerabilities

2 known vulnerabilities in CRMEB Java from Zhong Bang. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CRMEB Java: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-1608Mar 23, 2023Zhong Bang

  A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability affects the function getAdminList of the file /api/admin/store/product/list. The manipulation of the argument cateId leads to sql injection. Th

• 7.2 High severity

  CRMEB Java: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-1165Mar 3, 2023Zhong Bang

  A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been di