CVE-2025-7801 in BossSoft

Tóm tắt

Bởi MITRE • 18/07/2025

A vulnerability has been found in BossSoft CRM 6.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /crm/module/HNDCBas_customPrmSearchDtl.jsp. The manipulation of the argument cstid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• chịu trách nhiệm: VulDB
• Tiết lộ: 18/07/2025
• Kiểm duyệt: được chấp nhận
• mục: VDB-316867
• CPE: sẵn sàng
• CWE: CWE-89 (Đã xác nhận)
• Khai thác: Tải xuống
• CVSS: 7.3 (VulDB)
• EPSS: 0.00320
• KEV: không
• Các hoạt động: rất thấp
• ngành: Chemical, Industry, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-7801
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-7801
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-7801/