Metasoft MetaCRM 代码问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A code issue vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which stems from the improper handling of the parameter p in the AnalyzeParam function in the file download.jsp,...

Metasoft MetaCRM 安全漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A security vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which originates from improper handling of the file /env.jsp resulting in information disclosure...

Metasoft MetaCRM 代码问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A code issue vulnerability exists in Metasoft MetaCRM 6.4.2 and prior versions, which stems from an arbitrary file upload due to incorrect manipulation of parameter File in file...

CVE-2025-7879: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mobileupload.jsp. The manipulation of the argument File leads to unrestricted upload. The attack can be launched remotely. The...

CVE-2025-7875: Improper Authentication

A vulnerability classified as critical has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This affects an unknown part of the file /debug.jsp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

PT-2025-30179

Name of the Vulnerable Software and Affected Versions Metasoft MetaCRM versions up to 6.4.2 Description A critical vulnerability exists in Metasoft MetaCRM. The issue involves unrestricted file upload due to manipulation of the File argument within the processing of the sendfile.jsp file. This...

PT-2025-30180

Name of the Vulnerable Software and Affected Versions Metasoft MetaCRM versions up to 6.4.2 Description A critical vulnerability exists in Metasoft MetaCRM up to version 6.4.2. The issue involves an unrestricted file upload vulnerability located in an unknown function of the /common/jsp/upload2.j...

PT-2025-30175

Name of the Vulnerable Software and Affected Versions MetaCRM versions up to 6.4.2 Description A critical issue exists in MetaCRM due to a SQL injection vulnerability within the mcc login.jsp file. The workerid argument can be manipulated to exploit this issue, allowing for remote attacks. The...

PT-2025-30177

Name of the Vulnerable Software and Affected Versions Metasoft MetaCRM versions up to 6.4.2 Description A critical issue exists in Metasoft MetaCRM. The vulnerability affects an unknown part of the /debug.jsp file and leads to improper authentication. The attack can be initiated remotely. The...

PT-2025-30182

Name of the Vulnerable Software and Affected Versions Metasoft MetaCRM versions up to 6.4.2 Description A critical vulnerability exists in Metasoft MetaCRM. The issue is related to unrestricted file upload within the /business/common/sms/sendsms.jsp file, triggered by manipulating the File...

PT-2025-30176

Name of the Vulnerable Software and Affected Versions Metasoft MetaCRM versions up to 6.4.2 Description A vulnerability exists in Metasoft MetaCRM that allows for remote information disclosure through manipulation of an unknown functionality within the /env.jsp file. The exploit for this issue ha...

CVE-2025-7878: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in Metasoft 美特软件 MetaCRM up to 6.4.2. Affected is an unknown function of the file /common/jsp/upload2.jsp. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2025-7877: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This issue affects some unknown processing of the file sendfile.jsp. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has be...

CVE-2025-7874: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /env.jsp. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-7873: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file mcclogin.jsp. The manipulation of the argument workerid leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-7880: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2 and classified as critical. Affected by this issue is some unknown functionality of the file /business/common/sms/sendsms.jsp. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. Th...

Metasoft MetaCRM SQL注入漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A SQL injection vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which stems from improper handling of the parameter workerid in the file mcclogin.jsp, resulting in SQL injecti...

Metasoft MetaCRM 授权问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. An authorization issue vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which stems from improper authentication due to mishandling of the file /debug.jsp...

Metasoft MetaCRM 代码问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A code issue vulnerability exists in Metasoft MetaCRM 6.4.2 and prior versions, which stems from an incorrect operation of the File parameter in the file mobileupload.jsp that results in an...

PT-2025-30178

Name of the Vulnerable Software and Affected Versions Metasoft MetaCRM versions through 6.4.2 Description A critical vulnerability exists in Metasoft MetaCRM. The vulnerability affects the AnalyzeParam function within the download.jsp file. Manipulation of the p argument leads to deserialization,...