ZhongBangKeJi vulnerabilities
We track 3 vulnerabilities in ZhongBangKeJi products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 21, 2024.
Latest ZhongBangKeJi vulnerabilities
- 7.5 High severity
CRMEB: Deserialization of Untrusted Data
A vulnerability was found in ZhongBangKeJi CRMEB up to 5.4.0 and classified as critical. Affected by this issue is the function get_image_base64 of the file PublicController.php. The manipulation of the argument file leads to deserialization. The attack may be
- 8.8 High severity
CRMEB: Deserialization of Untrusted Data
A vulnerability has been found in ZhongBangKeJi CRMEB up to 5.4.0 and classified as critical. Affected by this vulnerability is the function downloadImage of the file app/services/product/product/CopyTaobaoServices.php. The manipulation leads to deserializatio
- 8.1 High severity
CRMEB: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been declared as critical. This vulnerability affects the function save/delete of the file /adminapi/system/crud. The manipulation leads to path traversal. The exploit has been disclosed to the pub