5 matches found
CVE-2025-70981
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...
CVE-2025-70981
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...
CVE-2025-70981
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...
CVE-2025-70981
CordysCRM 1.4.1 , a customer relationship management system developed by FIT2CLOUD Corporation, is vulnerable to SQL Injection . The flaw exists in the employee list query interface (/user/list) due to the improper neutralization of special elements within the departmentIds parameter. This vulner...