CVE-2023-1165

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-222261 was assigned to this vulnerability.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Mar 3, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-11664.8The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-privilege users such CVE-2023-11675.3Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all ver CVE-2023-11688.8An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Successful exploitation of this CVE-2023-11694.3The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'fil CVE-2023-11706.6Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.CVE-2023-11726.1The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 CVE-2023-11749.8This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the CVE-2023-11756.6Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.CVE-2023-11763.3Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.CVE-2023-11779.8Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.CVE-2023-11785.7An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5,CVE-2023-11795.4A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is