提出 #436675: 上海灵当信息科技有限公司 Lingdang CRM <= 8.6.4.3 SQL injection情報

タイトル上海灵当信息科技有限公司 Lingdang CRM <= 8.6.4.3 SQL injection
説明Lingdang CRM is an intelligent customer relationship management tool specifically designed for small and medium-sized enterprises. It is developed and operated by Shanghai Lingdang Information Technology Co., Ltd. It is widely used in various industries including finance, education, healthcare, IT services, and real estate. Lingdang CRM helps businesses meet their customer personalization management needs and enhances their competitiveness. Whether it's about acquiring new customers, maintaining existing ones, or managing the sales process and service management, Lingdang CRM provides comprehensive and efficient solutions. LingDang CRM versions x.x.x.x and earlier contain an SQL injection vulnerability, located at /crm/WeiXinApp/marketing/index.php. This vulnerability can be exploited without any special permissions.
ソース⚠️ https://wiki.shikangsi.com/post/share/4d05b8c3-5464-48f3-bb14-a852b6e70abc
ユーザー
 XingYue_Mstir (UID 72225)
送信2024年11月04日 04:13 (2 年 ago)
モデレーション2024年11月12日 07:45 (8 days later)
ステータス承諾済み
VulDBエントリ283969 [上海灵当信息科技有限公司 Lingdang CRM 迄 8.6.4.3 index.php?module=Users&action=getActionList userid SQLインジェクション]
ポイント20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!