lhc321

1 exploit Active since Jun 2024
CVE-2024-36837 NOMISEC HIGH WORKING POC
CRMEB 5.2.2 - SQL Injection via ProductController.php getProductList Function
SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController.php file.
2 stars
CVSS 7.5