CVE Catalog
CVE-2025-41005
HighSummary
Imaster's MEMS Events CRM contains an SQL injection vulnerability in the 'keyword' parameter in '/memsdemo/exchange_offers.php'.
Risk Assessment
An attacker can exploit the vulnerability to manipulate SQL queries, potentially leading to unauthorized data access, modification, or deletion.
Recommendation
It is recommended to use parameterized queries and input validation to eliminate the SQL injection vulnerability.
Other vulnerabilities in MEMS Events CRM
Original NVD description (English source)
Imaster's MEMS Events CRM contains an SQL injection vulnerability in‘keyword’ parameter in ‘/memsdemo/exchange_offers.php’.