CVE-2026-111359— CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift
Quick assessment
Affected
crmeb CRMEB
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
CRMEB 5.6.1 至 6.0.0 版本中存在不安全的直接对象引用（IDOR）漏洞，已认证的前台商店用户可以通过 gift-order API 读取并认领其他用户的订单。攻击者可以通过遍历 gift_detail 中的连续订单 ID，窃取买家身份信息以及 gift_key，随后调用 receive_gift 接口，将已付款的商品地址重定向至攻击者指定的地址。
Possible ATT&CK Techniques 3 AI
T1059 · Command and Scripting Interpreter T1113 · Screen Capture T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-111359
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift
Source: CVE Program / CVE List V5
Vulnerability Description
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders via the gift-order API. Attackers can enumerate sequential order IDs in gift_detail to harvest buyer identities and the gift_key, then call receive_gift to redirect paid goods to their address.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-111359
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-111359
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-111359 (1)
Security Blog Posts for CVE-2026-111359 (1)
Vendor Pages for CVE-2026-111359 (1)
IV. Related Vulnerabilities
Same product: CRMEB
-
CVE-2026-85212
CRMEB through 6.0.0 Missing Authorization via Inert verifyAu -
CVE-2026-85177
CRMEB through 6.0.0 Unauthorized Message Modification via ed -
CVE-2026-85040
ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval -
CVE-2026-1734
Zhong Bang CRMEB crontab Endpoint CrontabController.php auth -
CVE-2026-1733
Zhong Bang CRMEB :uni tidyOrder improper authorization
Same vendor: crmeb
-
CVE-2026-111354
crmeb_java through 3.1 Authorization Bypass via Front Order -
CVE-2026-85212
CRMEB through 6.0.0 Missing Authorization via Inert verifyAu -
CVE-2026-85177
CRMEB through 6.0.0 Unauthorized Message Modification via ed -
CVE-2026-10771
crmeb crmeb_java base64 Qrcode Endpoint RestTemplateUtil.jav
Same weakness: CWE-639
-
CVE-2026-103525
FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct -
CVE-2026-89280
Dokan: AI Powered WooCommerce Multivendor Marketplace Soluti -
CVE-2026-111368
ClassroomIO through 1.0.0 IDOR via Course Submission Update, -
CVE-2026-111366
cool-admin-midway through 8.0.0 Authorization Bypass via /ad -
CVE-2026-111365
cool-admin-midway through 8.0.0 Missing Authorization via Sy
V. Comments for CVE-2026-111359
No comments yet