Crmeb Crmeb_java
8 CVEs affecting Crmeb Crmeb_java. Latest disclosed: 2026-06-03. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-28714 | High | 8.1 | 2024-03-28 | SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter. |
CVE-2024-25469 | High | 7.5 | 2024-02-23 | SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude para… |
CVE-2026-10771 | High | 7.3 | 2026-06-03 | A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/ut… |
CVE-2023-25223 | High | 7.2 | 2023-03-07 | CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list. |
CVE-2024-24110 | Medium | 6.5 | 2024-03-21 | SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spre… |
CVE-2023-1608 | Medium | 6.3 | 2023-03-23 | A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability affects the function getAdminList of the f… |
CVE-2024-33117 | Medium | 5.3 | 2024-05-06 | crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController. |
CVE-2023-1609 | Low | 3.5 | 2023-03-23 | A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been rated as problematic. This issue affects the function save of the file /api/admin/s… |