CVE-2025-0463

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown function of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&miniproconsttype=1&relatedmodule=Singin. The...

CVE-2025-0463: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown function of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&miniproconsttype=1&relatedmodule=Singin. The...

PT-2025-3899 · Shanghai Lingdang Information Technology · Lingdang Crm

Name of the Vulnerable Software and Affected Versions: Shanghai Lingdang Information Technology Lingdang CRM versions up to 8.6.0.0 Description: A critical issue was found in the software, affecting an unknown function of the file /crm/weixinmp/index.php. The manipulation of the name argument lea...

CVE-2025-0461: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as problematic. This vulnerability affects unknown code of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&miniproconsttype=1&relatedmodule=Singin...

PT-2025-3897 · Unknown · Lingdang Crm

Name of the Vulnerable Software and Affected Versions: Lingdang CRM versions up to 8.6.0.0 Description: A vulnerability has been found in Lingdang CRM, allowing for path traversal through the manipulation of the pathfile argument in the file /crm/weixinmp/index.php. This can be initiated remotely...

CVE-2025-0462: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as critical. This issue affects some unknown processing of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&miniproconsttype=1. The manipulation of the...

PT-2025-3898 · Unknown · Lingdang Crm

Name of the Vulnerable Software and Affected Versions: Lingdang CRM versions up to 8.6.0.0 Description: A critical issue has been found in Lingdang CRM, affecting some unknown processes of the file /crm/weixinmp/index.php. The manipulation of the searchcontent argument leads to SQL injection. The...