Imaster - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2026-01-12.

Products

• Mems Events Crm - 2 CVEs
• Patient Record Management System - 2 CVEs

Newest CVEs of Imaster

• CVE-2025-41006 - CVSS 9.3 (critical), 2026-01-12: Imaster's MEMS Events CRM contains an SQL injection vulnerability in ‘phone’ parameter in ‘/memsdemo/login.php’.
• CVE-2025-41005 - CVSS 8.7 (high), 2026-01-12: Imaster's MEMS Events CRM contains an SQL injection vulnerability in‘keyword’ parameter in ‘/memsdemo/exchange_offers.php’.
• CVE-2025-41004 - CVSS 8.7 (high), 2026-01-12: Imaster's Patient Records Management System is vulnerable to SQL Injection in the endpoint ‘/projects/hospital/admin/complaints.php’ through the ‘id’ parameter.
• CVE-2025-41003 - CVSS 5.1 (medium), 2026-01-12: Imaster's Patient Record Management System contains a stored Cross-Site Scripting (XSS) vulnerability in the endpoint…