CVE-2025-7873

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file mcclogin.jsp. The manipulation of the argument workerid leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-7875 Metasoft 美特软件 MetaCRM debug.jsp improper authentication

A vulnerability classified as critical has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This affects an unknown part of the file /debug.jsp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2025-7875

The CVE-2025-7875 entry concerns Metasoft MetaCRM (versions up to 6.4.2). The vulnerability affects an unspecified portion of the /debug.jsp file and results in improper authentication, enabling remote initiation of an attack. Public exploitation details exist in the sources, and the vendor was c...

CVE-2025-7875 Metasoft 美特软件 MetaCRM debug.jsp improper authentication

A vulnerability classified as critical has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This affects an unknown part of the file /debug.jsp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2025-7874 Metasoft 美特软件 MetaCRM env.jsp information disclosure

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /env.jsp. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-7874

CVE-2025-7874 affects Metasoft MetaCRM up to 6.4.2. The issue arises from manipulation of an unknown functionality in /env.jsp, causing information disclosure. The vulnerability is remotely exploitable and the exploit has been disclosed publicly. Multiple sources (NVD, Red Hat, CVE list entries, ...

CVE-2025-7874 Metasoft 美特软件 MetaCRM env.jsp information disclosure

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /env.jsp. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-7873 Metasoft 美特软件 MetaCRM mcc_login.jsp sql injection

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file mcclogin.jsp. The manipulation of the argument workerid leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-7873

CVE-2025-7873 affects Metasoft MetaCRM up to version 6.4.2. Affected component: the file mcc_login.jsp where manipulating the workerid parameter leads to SQL injection. Impact: remote, with public exploit; vendor did not respond. Exploitation status and details are corroborated across multiple so...

CVE-2025-7873 Metasoft 美特软件 MetaCRM mcc_login.jsp sql injection

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file mcclogin.jsp. The manipulation of the argument workerid leads to sql injection. The attack can be launched remotely. The exploit...

PT-2025-30181 · Metasoft · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft 美特软件 MetaCRM versions up to 6.4.2 Description: A critical issue exists in an unknown functionality of the mobileupload.jsp file. Manipulation of the File argument allows for unrestricted file upload, and the attack can be launched...

PT-2025-30175 · Metacrm · Metacrm

Name of the Vulnerable Software and Affected Versions: MetaCRM versions up to 6.4.2 Description: A critical issue exists in MetaCRM due to a SQL injection vulnerability within the mcc login.jsp file. The workerid argument can be manipulated to exploit this issue, allowing for remote attacks. The...

PT-2025-30182 · Metasoft · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A critical vulnerability exists in Metasoft MetaCRM. The issue is related to unrestricted file upload within the /business/common/sms/sendsms.jsp file, triggered by manipulating the File...

Metasoft MetaCRM SQL注入漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A SQL injection vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which stems from improper handling of the parameter workerid in the file mcclogin.jsp, resulting in SQL injecti...

PT-2025-30179 · Metacrm · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A critical vulnerability exists in Metasoft MetaCRM. The issue involves unrestricted file upload due to manipulation of the File argument within the processing of the sendfile.jsp file. This...

Metasoft MetaCRM 安全漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A security vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which originates from improper handling of the file /env.jsp resulting in information disclosure...

PT-2025-30177 · Metasoft · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A critical issue exists in Metasoft MetaCRM. The vulnerability affects an unknown part of the /debug.jsp file and leads to improper authentication. The attack can be initiated remotely. The...

Metasoft MetaCRM 授权问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. An authorization issue vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which stems from improper authentication due to mishandling of the file /debug.jsp...

PT-2025-30176 · Metasoft · Metasoft Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A vulnerability exists in Metasoft MetaCRM that allows for remote information disclosure through manipulation of an unknown functionality within the /env.jsp file. The exploit for this issue...

Metasoft MetaCRM 代码问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A code issue vulnerability exists in Metasoft MetaCRM 6.4.2 and prior versions, which stems from an arbitrary file upload due to incorrect manipulation of parameter File in file...