| 标题 | 上海灵当信息科技有限公司 Lingdang CRM <= 8.6.4.3 SQL injection |
|---|
| 描述 | Lingdang CRM is an intelligent customer relationship management tool specifically designed for small and medium-sized enterprises. It is developed and operated by Shanghai Lingdang Information Technology Co., Ltd. It is widely used in various industries including finance, education, healthcare, IT services, and real estate. Lingdang CRM helps businesses meet their customer personalization management needs and enhances their competitiveness. Whether it's about acquiring new customers, maintaining existing ones, or managing the sales process and service management, Lingdang CRM provides comprehensive and efficient solutions.
LingDang CRM versions x.x.x.x and earlier contain an SQL injection vulnerability, located at /crm/WeiXinApp/marketing/index.php. This vulnerability can be exploited without any special permissions. |
|---|
| 来源 | ⚠️ https://wiki.shikangsi.com/post/share/4d05b8c3-5464-48f3-bb14-a852b6e70abc |
|---|
| 用户 | XingYue_Mstir (UID 72225) |
|---|
| 提交 | 2024-11-04 04時13分 (2 年前) |
|---|
| 管理 | 2024-11-12 07時45分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 283969 [上海灵当信息科技有限公司 Lingdang CRM 直到 8.6.4.3 index.php?module=Users&action=getActionList userid SQL注入] |
|---|
| 积分 | 20 |
|---|