Vulnerabilities > Crmeb > Crmeb > 3.1.0

DATE CVE VULNERABILITY TITLE RISK
2023-06-14 CVE-2023-3233 Server-Side Request Forgery (SSRF) vulnerability in Crmeb
A vulnerability was found in Zhong Bang CRMEB up to 4.6.0.
network
low complexity
crmeb CWE-918
8.8
2023-06-14 CVE-2023-3234 Deserialization of Untrusted Data vulnerability in Crmeb
A vulnerability was found in Zhong Bang CRMEB up to 4.6.0.
network
low complexity
crmeb CWE-502
critical
9.8
2023-06-14 CVE-2023-3232 Deserialization of Untrusted Data vulnerability in Crmeb
A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and classified as critical.
network
low complexity
crmeb CWE-502
critical
9.8
2021-06-24 CVE-2020-21787 Unrestricted Upload of File with Dangerous Type vulnerability in Crmeb 3.1.0+
CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.
network
low complexity
crmeb CWE-434
critical
10.0
2021-06-24 CVE-2020-21788 Server-Side Request Forgery (SSRF) vulnerability in Crmeb 3.1.0+
In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery).
network
low complexity
crmeb CWE-918
4.0