Approved changes feed: RSS · Atom
cpe:2.3:a:metasoft_:metacrm:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Metasoft (373b9eb9-1e7e-55bc-88ed-cfe92c6a8b08) |
|---|---|
| Product | Metacrm (aebde037-988c-58e3-a2d1-77953513c94f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16324 |
vulnerable | 2026-07-29 00:26:18.650527 |
Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload
HIGH (7.3)
A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-07-20T21:45:34.859Z
Updated: 2026-07-22T14:37:07.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15514 |
vulnerable | 2026-07-29 00:26:18.199719 |
Metasoft 美特软件 MetaCRM PHPRPC Remote Call rpc.jsp RPCService.query sql injection
HIGH (7.3)
A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCService.query of the file /customizemt/xkq/rpc.jsp of the component PHPRPC Remote Call Interface. Executing a manipulation of the argument phprpc_args can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-07-12T23:45:35.426Z
Updated: 2026-07-13T15:54:58.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8758 |
vulnerable | 2026-06-08 08:08:58.608630 |
Metasoft 美特软件 MetaCRM upload3.jsp unrestricted upload
HIGH (7.3)
A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This impacts an unknown function of the file /common/jsp/upload3.jsp. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-17T13:45:36.564Z
Updated: 2026-05-18T10:41:54.257Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10205 |
vulnerable | 2026-06-08 07:47:13.687457 |
Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload
MEDIUM (6.3)
A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is an unknown function of the file develop/systparam/softlogo/upload.jsp. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-01T00:00:39.126Z
Updated: 2026-06-01T15:23:56.913Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.