CVE-2025-7801: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in BossSoft CRM 6.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /crm/module/HNDCBascustomPrmSearchDtl.jsp. The manipulation of the argument cstid leads to sql injection. The attack can be launched remotely. The...

BossSoft CRM 注入漏洞

BossSoft CRM is a customer relationship management software from BossSoft, a Chinese company. An injection vulnerability exists in BossSoft CRM version 6.0, which originates from SQL injection due to incorrect manipulation of the parameter cstid in the file /crm/module/HNDCBascustomPrmSearchDtl.j...