| शीर्षक | Chanjet CRM V1.0 SQL Injection |
|---|
| विवरण | A critical unauthenticated SQL injection vulnerability has been discovered in the Chanjet CRM system, specifically within the ‘jxf_dump_table.php’ component. The vulnerability exists in the ‘gblOrgID’ parameter, which fails to properly sanitize user-supplied input before incorporating it into SQL queries. This flaw allows remote attackers without any authentication to execute arbitrary SQL commands against the backend database, potentially leading to data theft, data manipulation, privilege escalation, or complete system compromise.
|
|---|
| स्रोत | ⚠️ https://github.com/LittleRedBean/CVE/issues/1 |
|---|
| उपयोगकर्ता | rainyuwu (UID 99601) |
|---|
| सबमिशन | 07/07/2026 03:33 PM (2 महीनों पहले) |
|---|
| संयम | 01/09/2026 09:10 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 397556 [Chanjet CRM तक 20260707 jxf_dump_table.php gblOrgID SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|