CVE-2024-6943

A vulnerability has been found in ZhongBangKeJi CRMEB up to 5.4.0 and classified as critical. Affected by this vulnerability is the function downloadImage of the file app/services/product/product/CopyTaobaoServices.php. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272065 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-502

• https://gist.github.com/J1rrY-learn/e15a1926a3b5a2b8805a15cb95eff1d7Broken Link
• https://vuldb.com/?ctiid.272065Permissions Required
• https://vuldb.com/?id.272065Permissions Required
• https://vuldb.com/?submit.374394Third Party Advisory
• https://gist.github.com/J1rrY-learn/e15a1926a3b5a2b8805a15cb95eff1d7Broken Link
• https://vuldb.com/?ctiid.272065Permissions Required
• https://vuldb.com/?id.272065Permissions Required
• https://vuldb.com/?submit.374394Third Party Advisory

Published

Jul 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6937A vulnerability, which was classified as problematic, was fo…2.7
• CVE-2024-6938A vulnerability has been found in SiYuan 3.1.0 and classifie…5.4
• CVE-2024-6939A vulnerability was found in Xinhu RockOA 2.6.3 and classifi…6.1
• CVE-2024-6940A vulnerability was found in DedeCMS 5.7.114. It has been cl…7.2
• CVE-2024-6941A vulnerability, which was classified as problematic, has be…5.4
• CVE-2024-6942A vulnerability, which was classified as problematic, was fo…5.4
• CVE-2024-6944A vulnerability was found in ZhongBangKeJi CRMEB up to 5.4.0…7.5
• CVE-2024-6945A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has…9.8
• CVE-2024-6946A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has…8.8
• CVE-2024-6947A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has…8.8
• CVE-2024-6948A vulnerability classified as critical has been found in Gar…9.8
• CVE-2024-6949A vulnerability classified as problematic was found in Garga…5.3