| Titolo | Chanjet Information Technology Company Limited Chanjet CRM Chanjet CRM SQL Injection |
|---|
| Descrizione | Chanjet Information Technology Co., Ltd.'s CRM system is affected by an SQL injection vulnerability. Attackers can exploit this vulnerability to access database information, leading to the leakage of sensitive data.
Important: Do not include cookies when reproducing the vulnerability.
Tools like Burp Suite or SQLMap should not carry cookies during testing. Use the provided POC directly.
The vulnerability is sensitive to network conditions. Responses may be slow, so retrying with packet capture is recommended.
Ensure the request packet includes two blank lines at the end. |
|---|
| Fonte | ⚠️ https://github.com/ClausiusFan/CVE/blob/main/CVE_1.md |
|---|
| Utente | Clausius Fan (UID 85102) |
|---|
| Sottomissione | 10/05/2025 14:09 (1 Anno fa) |
|---|
| Moderazione | 24/05/2025 19:47 (14 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 310240 [Chanjet CRM fino a 20250510 gblOrgID iniezione SQL] |
|---|
| Punti | 20 |
|---|