CVE-2025-7801: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in BossSoft CRM 6.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /crm/module/HNDCBascustomPrmSearchDtl.jsp. The manipulation of the argument cstid leads to sql injection. The attack can be launched remotely. The...

BossSoft CRM 注入漏洞

BossSoft CRM is a customer relationship management software from BossSoft, a Chinese company. An injection vulnerability exists in BossSoft CRM version 6.0, which originates from SQL injection due to incorrect manipulation of the parameter cstid in the file /crm/module/HNDCBascustomPrmSearchDtl.j...

PT-2025-30087 · Bosssoft · Bosssoft Crm Version 6.0

Name of the Vulnerable Software and Affected Versions: BossSoft CRM version 6.0 Description: A critical issue exists in BossSoft CRM 6.0 related to SQL injection. The vulnerability is located in an unknown functionality within the file /crm/module/HNDCBas customPrmSearchDtl.jsp. Manipulation of t...