| Название | Chanjet Information Technology Company Limited Chanjet CRM Chanjet CRM SQL Injection |
|---|
| Описание | Chanjet Information Technology Co., Ltd.'s CRM system is affected by an SQL injection vulnerability. Attackers can exploit this vulnerability to access database information, leading to the leakage of sensitive data.
Important: Do not include cookies when reproducing the vulnerability.
Tools like Burp Suite or SQLMap should not carry cookies during testing. Use the provided POC directly.
The vulnerability is sensitive to network conditions. Responses may be slow, so retrying with packet capture is recommended.
Ensure the request packet includes two blank lines at the end. |
|---|
| Пользователь | Clausius Fan (UID 85102) |
|---|
| Представление | 10.05.2025 14:09 (1 Год назад) |
|---|
| Модерация | 24.05.2025 19:47 (14 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 310240 [Chanjet CRM до 20250510 gblOrgID SQL-инъекция] |
|---|
| Баллы | 20 |
|---|