CVE-2025-6132

CVE-2025-6132 affects Chanjet CRM 1.0. A vulnerability exists in the file /sysconfig/departmentsetting.php where manipulating the gblOrgID parameter leads to SQL injection. The issue can be exploited remotely and has been disclosed publicly. Exploitation details and the affected component are doc...

CVE-2025-13788

chanjet crm is affected by a SQL injection in /tools/upgradeattribute.php via the gblOrgID parameter. The vulnerability affects Chanjet CRM versions up to 20251106 (pre-51107). Root cause: input manipulation in an unknown function leads to injectable SQL. Impact is high (remote attacker, data exp...

CVE-2025-7915

CVE-2025-7915 affects Chanjet CRM 1.0. The vulnerability originates from an SQL injection in the Login Page component, specifically the /mail/mailinactive.php functionality. Multiple connected sources confirm remote exploitation potential and public disclosure of the exploit. The details consiste...