CVE-2025-25763 PoC — ZhongBangKeJi CRMEB SQL注入漏洞

Source

https://github.com/J-0k3r/CVE-2025-25763

Associated Vulnerability

Title:ZhongBangKeJi CRMEB SQL注入漏洞 (CVE-2025-25763)
Description:crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php

Readme

[description]
crmeb <= CRMEB-KY v5.4.0 have sql injection at getRead() in file app/services/system/SystemDatabackupServices.php
[Vulnerability Type]
SQL Injection
[Vendor of Product]
https://www.crmeb.com/
[Affected Product Code Base]
crmeb - <= CRMEB-KY v5.4.0
[Affected Component]
crmeb <= CRMEB-KY v5.4.0 have sql injection at  getRead() in file app/services/system/SystemDatabackupServices.php
[Attack Type]
Remote
[Impact Code execution]
true
[Impact Information Disclosure]
true
[Discoverer]
J_0k3r

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →