CVE-2026-105388Medium· 6.3▾ SunlitA weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php of the component Member Endpoint. This manipulation of the…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php of the component Member Endpoint. This manipulation of the argument group_id causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-105287Medium· 6.3A flaw has been found in feelec-yishu feelcrm-os 1.0.0
CVE-2026-105389Medium· 6.3A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0
CVE-2026-105290High· 7.3A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0
CVE-2026-105291Medium· 4.3A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0
CVE-2026-105289Low· 3.5A vulnerability was found in feelec-yishu feelcrm-os 1.0.0
CVE-2026-105288Medium· 4.3A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0