PT-2025-30182 · Metasoft · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A critical vulnerability exists in Metasoft MetaCRM. The issue is related to unrestricted file upload within the /business/common/sms/sendsms.jsp file, triggered by manipulating the File...

Metasoft MetaCRM SQL注入漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A SQL injection vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which stems from improper handling of the parameter workerid in the file mcclogin.jsp, resulting in SQL injecti...

Metasoft MetaCRM 代码问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A code issue vulnerability exists in Metasoft MetaCRM 6.4.2 and prior versions, which stems from an unrestricted upload due to improper handling of the parameter File in the file sendfile.jsp...

PT-2025-30180 · Metasoft · Metasoft Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A critical vulnerability exists in Metasoft MetaCRM up to version 6.4.2. The issue involves an unrestricted file upload vulnerability located in an unknown function of the...

PT-2025-30181 · Metasoft · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft 美特软件 MetaCRM versions up to 6.4.2 Description: A critical issue exists in an unknown functionality of the mobileupload.jsp file. Manipulation of the File argument allows for unrestricted file upload, and the attack can be launched...

PT-2025-30176 · Metasoft · Metasoft Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A vulnerability exists in Metasoft MetaCRM that allows for remote information disclosure through manipulation of an unknown functionality within the /env.jsp file. The exploit for this issue...

Metasoft MetaCRM 授权问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. An authorization issue vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which stems from improper authentication due to mishandling of the file /debug.jsp...

PT-2025-30178 · Metacrm · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions through 6.4.2 Description: A critical vulnerability exists in Metasoft MetaCRM. The vulnerability affects the AnalyzeParam function within the download.jsp file. Manipulation of the p argument leads to deserializatio...

Metasoft MetaCRM 代码问题漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A code issue vulnerability exists in Metasoft MetaCRM 6.4.2 and prior versions, which stems from an incorrect operation of the File parameter in the file mobileupload.jsp that results in an...

PT-2025-30177 · Metasoft · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A critical issue exists in Metasoft MetaCRM. The vulnerability affects an unknown part of the /debug.jsp file and leads to improper authentication. The attack can be initiated remotely. The...

PT-2025-30179 · Metacrm · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions up to 6.4.2 Description: A critical vulnerability exists in Metasoft MetaCRM. The issue involves unrestricted file upload due to manipulation of the File argument within the processing of the sendfile.jsp file. This...

File Upload Vulnerability in MetaSoft MetaCrm

hereinafter referred to as "Metsoft" is a professional customer relationship management software provider. A file upload vulnerability exists in MetaCrm, which can be exploited by attackers to upload arbitrary malicious files...