Approved changes feed: RSS · Atom

cpe:2.3:a:crmeb:crmeb:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorCrmeb (74776fee-3733-5224-811a-51c1e3d4a7e4)
ProductCrmeb (f7a2db34-63da-57a8-b492-274209de1d10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/crmeb/crmeb purl2cpe 2026-06-01 10:16:13.403255

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52726 vulnerable 2026-06-08 06:52:16.188392 Details available
CRMEB v5.4.0 is vulnerable to Arbitrary file read in the save_basics function which allows an attacker to obtain sensitive information
Published: 2024-11-22T00:00:00.000Z
Updated: 2024-11-27T16:44:34.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50653 vulnerable 2026-06-08 06:52:11.363813 Details available
CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a large number of data packets for coupon collection, achieving unlimited coupon collection.
Published: 2024-11-15T00:00:00.000Z
Updated: 2025-03-13T15:33:35.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.