Yonyou Changjietong UFIDA CRM SQL Injection Vulnerability

Yonyou Changjietong UFIDA CRM is a customer relationship management system for small and medium-sized enterprises SMEs from China's Yonyou, integrating sales automation and marketing analytics. Yonyou Changjietong UFIDA CRM suffers from a SQL injection vulnerability that originates from the lack ...

CVE-2025-4510

A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /optnty/optntyday.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-4510

A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /optnty/optntyday.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-4510 Changjietong UFIDA CRM optntyday.php sql injection

A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /optnty/optntyday.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-4510 Changjietong UFIDA CRM optntyday.php sql injection

A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /optnty/optntyday.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-4510

CVE-2025-4510 affects Changjietong UFIDA CRM 1.0. The vulnerability is a SQL injection in the file /optnty/optntyday.php triggered by manipulating the gblOrgID parameter. It can be exploited remotely; several sources describe the issue as critical. The root cause is lack of validation/escaping fo...

CVE-2025-4510: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /optnty/optntyday.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-20636 · Ufida · Changjietong Ufida Crm

Name of the Vulnerable Software and Affected Versions: Changjietong UFIDA CRM version 1.0 Description: A critical issue has been identified, affecting the file /optnty/optntyday.php. The manipulation of the gblOrgID argument leads to SQL injection. This issue can be exploited remotely...