Approved changes feed: RSS · Atom

cpe:2.3:a:chanjet:chanjet_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorChanjet (29c05c81-a37c-50ef-b886-c1eb5e12fbe6)
ProductChanjet Cms (55378245-e551-5a16-ae75-5483f210f95e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/chanjet/chanjet-openapi-java-sdk purl2cpe 2026-06-01 10:11:53.118292

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5152 vulnerable 2026-06-08 07:35:24.278207 Chanjet CRM newActivityedit.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1&id=null&ret=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-05-25T17:00:08.649Z
Updated: 2025-05-28T17:38:19.361Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.