CVE-2021-48008

Chanjet CRM is affected by an unauthenticated SQL injection vulnerability in the site_id GET parameter of the get_usedspace.php webservice endpoint. The root cause is the lack of input sanitization or parameterization, which allows remote attackers to use UNION-based injection techniques to execu...