Vendors / Zhong Bang Records 43 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 14
Exploited now Zhong Bang records in CISA KEV No Zhong Bang vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 70
SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00849 · Published 2024-03-28 · No fix listed CWE-89
Priority HIGH 68
SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00786 · Published 2024-02-23 · No fix listed CWE-89
Priority HIGH 67
CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00755 · Published 2023-03-07 · No fix listed CWE-89
Priority MEDIUM 62
SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00613 · Published 2024-02-29 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0063 · Published 2023-03-23 · No fix listed CWE-89
Priority LOW 25
A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00517 · Published 2023-03-23 · No fix listed CWE-79
Priority LOW 24
crmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00468 · Published 2024-05-06 · No fix listed CWE-918
Open these records in search → All records by CVSS severity
7 14 21 1 0
THREATIST.IORead the docs