73 matches found
PT-2025-22864 · Chanjet · Chanjet Crm
Name of the Vulnerable Software and Affected Versions: Chanjet CRM versions up to 20250510 Description: A critical vulnerability was found in Chanjet CRM, affecting the file "/activity/newActivityedit.php" with the gblOrgID argument, leading to SQL injection. The attack can be initiated remotely...
Chanjet CRM 注入漏洞
Chanjet CRM is a Customer Relationship Management system from China Changjitong Chanjet. An injection vulnerability exists in Chanjet CRM 20250510 and earlier versions, which originates from SQL injection due to incorrect operation of the parameter gblOrgID in the file...
CVE-2024-5653
A vulnerability, which was classified as critical, has been found in Chanjet Smooth T+system 3.5. This issue affects some unknown processing of the file /tplus/UFAQD/keyEdit.aspx. The manipulation of the argument KeyID leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2024-5653
A vulnerability, which was classified as critical, has been found in Chanjet Smooth T+system 3.5. This issue affects some unknown processing of the file /tplus/UFAQD/keyEdit.aspx. The manipulation of the argument KeyID leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2024-5653
A vulnerability, which was classified as critical, has been found in Chanjet Smooth T+system 3.5. This issue affects some unknown processing of the file /tplus/UFAQD/keyEdit.aspx. The manipulation of the argument KeyID leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2024-5653
CVE-2024-5653 affects Chanjet Smooth T+system 3.5. The SQL injection vulnerability arises from insecure handling of the KeyID parameter in /tplus/UFAQD/keyEdit.aspx, enabling remote exploitation. Multiple sources corroborate the issue and indicate public exploitation may be possible. Remediation ...
CVE-2024-5653 Chanjet Smooth T+system keyEdit.aspx sql injection
A vulnerability, which was classified as critical, has been found in Chanjet Smooth T+system 3.5. This issue affects some unknown processing of the file /tplus/UFAQD/keyEdit.aspx. The manipulation of the argument KeyID leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2024-5653 Chanjet Smooth T+system keyEdit.aspx sql injection
A vulnerability, which was classified as critical, has been found in Chanjet Smooth T+system 3.5. This issue affects some unknown processing of the file /tplus/UFAQD/keyEdit.aspx. The manipulation of the argument KeyID leads to sql injection. The attack may be initiated remotely. The exploit has...
Chanjet Smooth T+system SQL Injection Vulnerability
Chanjet Smooth T+system is an enterprise management software from China's Changjitong Chanjet, which is mainly for small and medium-sized enterprises, providing comprehensive solutions for finance, business, production and supply chain management. The system is designed to help enterprises realiz...
PT-2024-36833
Name of the Vulnerable Software and Affected Versions Chanjet Smooth T+ system version 3.5 Description A critical issue has been found in the system, affecting the processing of the file /tplus/UFAQD/keyEdit.aspx. The manipulation of the KeyID argument leads to SQL injection. The attack can be...
i.chanjet.com Open Redirect vulnerability
Vulnerable URL: http://i.chanjet.com/login/logout?callback=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...
某通用CRM系统任意文件上传
简要描述： 某通用CRM系统任意文件上传 详细说明： 用友旗下的畅捷通CRM http://www.chanjet.com/bencandy.php?fid=41&id=185 如图 存在任意文件上传，我们到官方demo站，crm.chanjet.com,发现弱口令 test 111111，成功登入 选择产品，看到附件 我们来新建一个附件，直接上传1.php，上传成功，我们来访问下， 上传后缀成了php.bak，由于官方使用apache搭建的，存在解析漏洞，所以这个是可以get...