EUVD-2025-18423

Malicious code in bioql PyPI...

CVE-2025-6132 Chanjet CRM departmentsetting.php sql injection

A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-6132

CVE-2025-6132 affects Chanjet CRM 1.0. A vulnerability exists in the file /sysconfig/departmentsetting.php where manipulating the gblOrgID parameter leads to SQL injection. The issue can be exploited remotely and has been disclosed publicly. Exploitation details and the affected component are doc...

CVE-2025-5152 Chanjet CRM newActivityedit.php sql injection

A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1&id=null&ret=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated...