| Название | Chanjet CRM V1.0 SQL Injection |
|---|
| Описание | A critical SQL injection vulnerability was discovered in Chanjet CRM upgradeattribute.php component. The "gblOrgID" parameter is vulnerable to SQL injection, allowing unauthenticated attackers to execute arbitrary SQL queries on the backend database.
|
|---|
| Источник | ⚠️ https://github.com/Bellingham-max/CVE/issues/1 |
|---|
| Пользователь | HALA (UID 92379) |
|---|
| Представление | 06.11.2025 15:09 (8 месяцы назад) |
|---|
| Модерация | 29.11.2025 21:25 (23 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 333792 [Chanjet CRM до 20251106 upgradeattribute.php gblOrgID SQL-инъекция] |
|---|
| Баллы | 18 |
|---|