CVE-2025-41006

Critical

Published: 12/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Imaster's MEMS Events CRM contains an SQL injection vulnerability in the 'phone' parameter in '/memsdemo/login.php'.

An attacker can exploit the vulnerability to manipulate the database, potentially leading to data confidentiality and integrity breaches.

Immediately update MEMS Events CRM to the latest version containing the fix.

Original NVD description (English source)

Imaster's MEMS Events CRM contains an SQL injection vulnerability in ‘phone’ parameter in ‘/memsdemo/login.php’.