BossSoft CRM 注入漏洞

BossSoft CRM is a customer relationship management software from BossSoft, a Chinese company. An injection vulnerability exists in BossSoft CRM version 6.0, which originates from SQL injection due to incorrect manipulation of the parameter cstid in the file /crm/module/HNDCBascustomPrmSearchDtl.j...