Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-1165

Опубликовано: 03 мар. 2023
Источник: nvd
CVSS3: 5.5
CVSS3: 7.2
CVSS2: 5.2
EPSS Низкий

Описание

A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-222261 was assigned to this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:crmeb:crmeb:1.3.4:*:*:*:*:java:*:*

EPSS

Процентиль: 24%
0.0008
Низкий

5.5 Medium

CVSS3

7.2 High

CVSS3

5.2 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.2
github
почти 3 года назад

A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-222261 was assigned to this vulnerability.

EPSS

Процентиль: 24%
0.0008
Низкий

5.5 Medium

CVSS3

7.2 High

CVSS3

5.2 Medium

CVSS2

Дефекты

CWE-89