CVE-2025-6132

A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit...

Chanjet CRM 注入漏洞

Chanjet CRM is a customer relationship management system from China's Chanjet company. An injection vulnerability exists in Chanjet CRM version 1.0, which is caused by incorrect manipulation of the parameter gblOrgID in the file /sysconfig/departmentsetting.php, resulting in SQL injection...

Chanjet CRM 注入漏洞

Chanjet CRM is a Customer Relationship Management system from China Changjitong Chanjet. An injection vulnerability exists in Chanjet CRM 20250510 and earlier versions, which originates from SQL injection due to incorrect operation of the parameter gblOrgID in the file...

CVE-2025-4510

CVE-2025-4510 affects Changjietong UFIDA CRM 1.0. The vulnerability is a SQL injection in the file /optnty/optntyday.php triggered by manipulating the gblOrgID parameter. It can be exploited remotely; several sources describe the issue as critical. The root cause is lack of validation/escaping fo...

Yonyou Changjietong UFIDA CRM 安全漏洞

Yonyou Changjietong UFIDA CRM is a customer relationship management system for small and medium-sized enterprises SMEs from China's Yonyou, integrating sales automation and marketing analytics. Yonyou Changjietong UFIDA CRM suffers from a SQL injection vulnerability that originates from the lack ...