3 matches found
CVE-2025-70981
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...
9.8CVSS0.00339EPSS
SaveExploits1References1
CVE-2025-70981
CordysCRM 1.4.1 , a customer relationship management system developed by FIT2CLOUD Corporation, is vulnerable to SQL Injection . The flaw exists in the employee list query interface (/user/list) due to the improper neutralization of special elements within the departmentIds parameter. This vulner...
9.8CVSS5.8AI score0.00339EPSS
SaveExploits1References1Affected Software1
20