CVE-2025-15442
A vulnerability was determined in CRMEB up to 5.6.1.
Published Jan 4, 2026 · updated Oct 14, 2026 · crmeb crmeb
A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the file /adminapi/export/product_list. This manipulation of the argument cate_id causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Timeline
Detection, updates, and resolution for this record.
Jan 4, 2026 · NIST NVD
Detected
A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the file /adminapi/export/product_list. This manipulation of the argument cate_id causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Oct 14, 2026 · NIST NVD
Updated
A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the file /adminapi/export/product_list. This manipulation of the argument cate_id causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected
- cpe crmeb/crmebversion unspecified
Sources
- CVE.orgCVE-2025-15442
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-15442
30-day exploitation probability 0.4%
first.org - NIST NVDCVE-2025-15442
A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the file /adminapi/export/product_list. This manipulation of the argument cate_id causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed an
nvd.nist.gov