A vulnerability was identified in CRMEB up to 5.6.1.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jan 4, 2026 · NIST NVD

   Detected

   A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of the file /adminapi/product/product_export. Such manipulation of the argument cate_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

2. Oct 14, 2026 · NIST NVD

   Updated

   A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of the file /adminapi/product/product_export. Such manipulation of the argument cate_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected

• cpe crmeb/crmebversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2025-15443

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-15443

  30-day exploitation probability 0.4%

  first.org
• NIST NVDVulnerability recordCVE-2025-15443

  A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of the file /adminapi/product/product_export. Such manipulation of the argument cate_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available a

  nvd.nist.gov

References

• Exploit · github.com
• Exploit · github.com
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com