Veille CVE

Recherche « Chanjet Information Technology Co., Ltd. CRM »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Chanjet Information Technology Co., Ltd. CRM » ✕
  1. CVE-2021-48008 7.5 Élevée

    Chanjet Information Technology Co., Ltd. CRM

    Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the site_id GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization or parameterization through UNION-based injection techniques to extract sensitive data from the underlying database. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.