Zhong Bang vulnerabilities
Published CVEs affecting Zhong Bang products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-1734
Medium · 5.3
CWE-862 Feb 1, 2026
Zhong Bang CRMEB crontab Endpoint CrontabController.php authorization
A security flaw has been discovered in Zhong Bang CRMEB up to 5.6.3. This vulnerability affects unknown code of the file crmeb/app/api/controller/v1/CrontabController.php of the component crontab Endpoint. The manipulation results in missing authorization. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-1733
Medium · 4.3
CWE-639 Feb 1, 2026
Zhong Bang CRMEB :uni tidyOrder improper authorization
A vulnerability was identified in Zhong Bang CRMEB up to 5.6.3. This affects the function detail/tidyOrder of the file /api/store_integral/order/detail/:uni. The manipulation of the argument order_id leads to improper authorization. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.