GCVE - cpe:2.3:a:crmeb:crmeb:5.2.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:crmeb:crmeb:5.2.2:*:*:*:*:*:*:*

part: a version: 5.2.2 update: *

Vendor	Crmeb (`74776fee-3733-5224-811a-51c1e3d4a7e4`)
Product	Crmeb (`f7a2db34-63da-57a8-b492-274209de1d10`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/crmeb/crmeb`	purl2cpe	2026-06-01 10:16:13.405103

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-36837`	vulnerable	2026-06-08 06:39:45.710075	Details available SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController.php file. Published: 2024-06-05T00:00:00.000Z Updated: 2024-08-02T03:43:49.147Z Open on db.gcve.eu Reference links https://github.com/phtcloud-dev/CVE-2024-36837	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1704`	vulnerable	2026-06-08 06:27:14.138149	ZhongBangKeJi CRMEB crud delete path traversal MEDIUM (5.5) A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been declared as critical. This vulnerability affects the function save/delete of the file /adminapi/system/crud. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254392. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-02-21T17:31:04.410Z Updated: 2024-08-01T18:48:21.812Z Open on db.gcve.eu Reference links https://vuldb.com/?id.254392 https://vuldb.com/?ctiid.254392 https://github.com/Echosssy/CVE/blob/main/%E4%BC%97%E9%82%A6%E7%A7%91%E6%8A%80CRMEB%20Mall%20business%20edition%20overrides%20any%20file.docx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1703`	vulnerable	2026-06-08 06:27:14.136745	ZhongBangKeJi CRMEB openfile absolute path traversal LOW (3.5) A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been classified as problematic. This affects the function openfile of the file /adminapi/system/file/openfile. The manipulation leads to absolute path traversal. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254391. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-02-21T17:00:09.614Z Updated: 2024-08-27T14:29:52.020Z Open on db.gcve.eu Reference links https://vuldb.com/?id.254391 https://vuldb.com/?ctiid.254391 https://github.com/Echosssy/-CRMEB-Mall-commercial-version-of-any-file-read-vulnerability/blob/main/README.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.