CVE-2025-15442

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-15442
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15442.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-15442
Published
2026-01-04T11:02:06.400Z
Modified
2026-07-15T01:48:50.800027176Z
Severity
  • 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
CRMEB product_list sql injection
Details

A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the file /adminapi/export/productlist. This manipulation of the argument cateid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15442.json",
    "cwe_ids": [
        "CWE-74",
        "CWE-89"
    ],
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.6.0"
                },
                {
                    "last_affected": "5.6.0"
                },
                {
                    "introduced": "5.6.1"
                },
                {
                    "last_affected": "5.6.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/crmeb/crmeb

Affected ranges

Type
GIT
Repo
https://github.com/crmeb/crmeb
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
22ba274dd2583edf28270292ea7bb0f4934e933c
Database specific 
{
    "cpe": "cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.6.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v2.*
v2.6
v2.6.0
v4.*
v4.4.2
v4.4.4
v4.6.0
v4.7.0
v5.*
v5.2.0
v5.3.0
v5.4.0
v5.6.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15442.json"