| 제목 | Chanjet CRM V1.0 SQL Injection |
|---|
| 설명 | A critical SQL injection vulnerability was discovered in Chanjet CRM upgradeattribute.php component. The "gblOrgID" parameter is vulnerable to SQL injection, allowing unauthenticated attackers to execute arbitrary SQL queries on the backend database.
|
|---|
| 원천 | ⚠️ https://github.com/Bellingham-max/CVE/issues/1 |
|---|
| 사용자 | HALA (UID 92379) |
|---|
| 제출 | 2025. 11. 06. PM 03:09 (8 개월 ago) |
|---|
| 모더레이션 | 2025. 11. 29. PM 09:25 (23 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 333792 [Chanjet CRM 까지 20251106 upgradeattribute.php gblOrgID SQL 주입] |
|---|
| 포인트들 | 18 |
|---|