CVE-2025-7915

A vulnerability was found in Chanjet CRM 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mail/mailinactive.php of the component Login Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2025-7915 Chanjet CRM Login Page mailinactive.php sql injection

A vulnerability was found in Chanjet CRM 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mail/mailinactive.php of the component Login Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2025-7915

CVE-2025-7915 affects Chanjet CRM 1.0. The vulnerability originates from an SQL injection in the Login Page component, specifically the /mail/mailinactive.php functionality. Multiple connected sources confirm remote exploitation potential and public disclosure of the exploit. The details consiste...

CVE-2025-7915 Chanjet CRM Login Page mailinactive.php sql injection

A vulnerability was found in Chanjet CRM 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mail/mailinactive.php of the component Login Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

Chanjet CRM 注入漏洞

Chanjet CRM is a customer relationship management system from China's Chanjet company. An injection vulnerability exists in Chanjet CRM version 1.0, which originates from a SQL injection issue in the file /mail/mailinactive.php, which could lead to a remote attack...

PT-2025-30227

Name of the Vulnerable Software and Affected Versions Chanjet CRM version 1.0 Description A critical vulnerability exists in Chanjet CRM 1.0. The issue is related to SQL injection within an unknown functionality of the file /mail/mailinactive.php of the Login Page component. This allows for remot...

CVE-2025-6132

A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-6132

A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-6132

A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-6132 Chanjet CRM departmentsetting.php sql injection

A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-6132

CVE-2025-6132 affects Chanjet CRM 1.0. A vulnerability exists in the file /sysconfig/departmentsetting.php where manipulating the gblOrgID parameter leads to SQL injection. The issue can be exploited remotely and has been disclosed publicly. Exploitation details and the affected component are doc...

CVE-2025-6132 Chanjet CRM departmentsetting.php sql injection

A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit...

Chanjet CRM 注入漏洞

Chanjet CRM is a customer relationship management system from China's Chanjet company. An injection vulnerability exists in Chanjet CRM version 1.0, which is caused by incorrect manipulation of the parameter gblOrgID in the file /sysconfig/departmentsetting.php, resulting in SQL injection...

PT-2025-25578 · Unknown · Chanjet Crm

Name of the Vulnerable Software and Affected Versions: Chanjet CRM version 1.0 Description: A critical vulnerability has been found in Chanjet CRM, affecting an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the gblOrgID argument leads to SQL injection. Th...

CVE-2025-5152

A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1=null=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-5152

A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1&id=null&ret=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated...

CVE-2025-5152

A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1&id=null&ret=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated...

CVE-2025-5152

CVE-2025-5152 affects Chanjet CRM up to 20250510. The vulnerability resides in the endpoint /activity/newActivityedit.php with the gblOrgID parameter, where improper handling enables SQL injection. Exploitation can be performed remotely, and public disclosures exist. Multiple sources corroborate ...

CVE-2025-5152 Chanjet CRM newActivityedit.php sql injection

A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1&id=null&ret=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated...

CVE-2025-5152 Chanjet CRM newActivityedit.php sql injection

A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1&id=null&ret=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated...