Lucene search
+L

4 matches found

osv_cve
osv_cve
•added 2026/02/12 12:00 a.m.•19 views

CVE-2025-70981

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

9.8CVSS5.9AI score0.0037EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/02/12 12:00 a.m.•11 views

CVE-2025-70981

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

9.8CVSS5.9AI score0.0037EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/12 12:00 a.m.•7 views

CVE-2025-70981: Improper Neutralization of Special Elements used in an SQL Command

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface /user/list via the departmentIds parameter...

9.8CVSS5.9AI score0.0037EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/12 12:00 a.m.•29 views

FIT2CLOUD CordysCRM security vulnerability

FIT2CLOUD CordysCRM is a customer relationship management system developed by FIT2CLOUD Corporation. Version 1.4.1 of FIT2CLOUD CordysCRM contains a security vulnerability. This vulnerability stems from a flaw in the departmentIds parameter within the /user/list interface, which may lead to SQL...

9.8CVSS5.9AI score0.0037EPSS
SaveExploits1References2
Rows per page
Query Builder