| 标题 | Chanjet CRM V1.0 SQL Injection |
|---|
| 描述 | A critical SQL injection vulnerability was discovered in Chanjet CRM upgradeattribute.php component. The "gblOrgID" parameter is vulnerable to SQL injection, allowing unauthenticated attackers to execute arbitrary SQL queries on the backend database.
|
|---|
| 来源 | ⚠️ https://github.com/Bellingham-max/CVE/issues/1 |
|---|
| 用户 | HALA (UID 92379) |
|---|
| 提交 | 2025-11-06 15時09分 (11 月前) |
|---|
| 管理 | 2025-11-29 21時25分 (23 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 333792 [Chanjet CRM 直到 20251106 upgradeattribute.php gblOrgID SQL注入] |
|---|
| 积分 | 18 |
|---|