CVE-2025-5152

CVE-2025-5152 affects Chanjet CRM up to 20250510. The vulnerability resides in the endpoint /activity/newActivityedit.php with the gblOrgID parameter, where improper handling enables SQL injection. Exploitation can be performed remotely, and public disclosures exist. Multiple sources corroborate ...