Approved changes feed: RSS · Atom

cpe:2.3:a:crmeb:crmeb:5.4.0:*:*:*:*:*:*:*

part: a version: 5.4.0 update: *

VendorCrmeb (74776fee-3733-5224-811a-51c1e3d4a7e4)
ProductCrmeb (f7a2db34-63da-57a8-b492-274209de1d10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/crmeb/crmeb purl2cpe 2026-06-01 10:16:13.405106

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25763 vulnerable 2026-06-08 07:12:51.334794 Details available
crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php
Published: 2025-03-06T00:00:00.000Z
Updated: 2025-03-07T19:43:35.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52726 vulnerable 2026-06-08 06:52:16.190031 Details available
CRMEB v5.4.0 is vulnerable to Arbitrary file read in the save_basics function which allows an attacker to obtain sensitive information
Published: 2024-11-22T00:00:00.000Z
Updated: 2024-11-27T16:44:34.613Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.