Advisories · Technology
CRMEB.
Every CVE that names CRMEB among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift
- CRMEB
- Broken access control
- CVSS 8.7 High
CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Check
- CRMEB
- Broken access control
- CVSS 5.3 Medium
CRMEB through 6.0.0 Unauthorized Message Modification via edit_message
- CRMEB
- Broken access control
- CVSS 6.3 Medium
CRMEB JSON Token LoginServices.php remoteRegister improper authentication
- CRMEB
- Authentication bypass
- CVSS 6.9 Medium
CRMEB LoginController.php appleLogin improper authentication
- CRMEB
- Authentication bypass
- CVSS 5.1 Medium
CRMEB product_export sql injection
- CRMEB
- Other injection
- SQL injection
- CVSS 5.1 Medium
CRMEB product_list sql injection
- CRMEB
- Other injection
- SQL injection
- CVSS 6.3 Medium
CRMEB JWT HMAC Secret hard-coded key
- CRMEB
- Hard-coded credentials
- CWE-320
- CVSS 5.3 Medium
CRMEB GET Parameter product sql injection
- CRMEB
- Other injection
- SQL injection
- CVSS 5.3 Medium
CRMEB OutAccountServices.php testOutUrl server-side request forgery
- CRMEB
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
CRMEB UserAddressServices.php editAddress improper authorization
- CRMEB
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
CRMEB Administrator Password SystemAdminServices.php save improper authorization
- CRMEB
- Privilege escalation
- Broken access control