Approved changes feed: RSS · Atom
cpe:2.3:a:chanjet:crm:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Chanjet (29c05c81-a37c-50ef-b886-c1eb5e12fbe6) |
|---|---|
| Product | Crm (b4901d6d-00aa-59d1-9a70-21b60cc55cdb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11456 |
vulnerable | 2026-06-08 07:47:14.177344 |
Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injection
HIGH (7.3)
A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxf_dump_systable.php of the component HTTP GET Request Handler. Such manipulation of the argument gblOrgID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-07T07:15:07.511Z
Updated: 2026-06-08T15:26:36.196Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7915 |
vulnerable | 2026-06-08 07:45:18.503732 |
Chanjet CRM Login Page mailinactive.php sql injection
HIGH (7.3)
A vulnerability was found in Chanjet CRM 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mail/mailinactive.php of the component Login Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-21T00:32:04.959Z
Updated: 2025-07-21T18:20:38.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6132 |
vulnerable | 2026-06-08 07:43:14.350443 |
Chanjet CRM departmentsetting.php sql injection
HIGH (7.3)
A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-16T17:31:05.267Z
Updated: 2025-06-16T18:58:03.858Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5152 |
vulnerable | 2026-06-08 07:35:24.277220 |
Chanjet CRM newActivityedit.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1&id=null&ret=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-05-25T17:00:08.649Z
Updated: 2025-05-28T17:38:19.361Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14189 |
vulnerable | 2026-06-08 07:06:33.826653 |
Chanjet CRM jxf_dump_table_demo.php sql injection
HIGH (7.3)
A vulnerability was detected in Chanjet CRM up to 20251121. Affected is an unknown function of the file /tools/jxf_dump_table_demo.php. The manipulation of the argument gblOrgID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-07T11:32:05.273Z
Updated: 2025-12-08T19:42:27.517Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13788 |
vulnerable | 2026-06-08 07:06:32.709953 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.