Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/02/13 1:31 a.m.•18 views

CVE-2025-70981

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

9.8CVSS5.9AI score0.00339EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/12 6:16 p.m.•15 views

CVE-2025-70981

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

9.8CVSS0.00339EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/02/12 12:00 a.m.•6 views

CVE-2025-70981

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

5.8AI score0.00339EPSS
SaveExploits1References1
CVE
CVE
•added 2026/02/12 12:00 a.m.•38 views

CVE-2025-70981

CordysCRM 1.4.1 , a customer relationship management system developed by FIT2CLOUD Corporation, is vulnerable to SQL Injection . The flaw exists in the employee list query interface (/user/list) due to the improper neutralization of special elements within the departmentIds parameter. This vulner...

9.8CVSS5.8AI score0.00339EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2026/02/12 12:00 a.m.•47 views

CVE-2025-70981

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

0.00339EPSS
SaveExploits1References1
Rows per page
Query Builder