CVE-2021-41746

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive database information...

Sql injection

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive database information...

CVE-2021-41746

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive database information...

CVE-2021-41746

CVE-2021-41746 is a SQL injection vulnerability in all versions of Yonyou TurboCRM reachable via the orgcode parameter in changepswd.php. Attackers could use this to obtain sensitive database information. The Red Hat and CVE-tracking records confirm the same issue. The connected documents do not ...

CVE-2021-41746: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive database information...

PT-2021-23392

Name of the Vulnerable Software and Affected Versions Yonyou TurboCRM versions all Description A SQL Injection issue exists via the orgcode parameter in changepswd.php, allowing attackers to obtain sensitive database information. Recommendations For all versions, as a temporary workaround, consid...