CNNVD-202512-828 Information
Dec 07, 2025
cve
CNNVD ID
CNNVD-202512-828
Related CVE
- CNNVD Published: 2025-12-07
Description (Chinese)
Chanjet CRM是中国畅捷通（Chanjet）公司的一个客户关系管理系统。 Chanjet CRM 20251121及之前版本存在SQL注入漏洞，该漏洞源于对文件/tools/jxf_dump_table_demo.php中参数gblOrgID的错误操作，可能导致SQL注入。
Description (English)
Chanjet CRM is a customer relationship management system of Chanjet China. Chanjet CRM 202511121 and previous versions had an injection loophole in SQL, which stemmed from an error in the operation of gblOrgID, the parameter in document/tools/jxf dump table demo.php, which could lead to SQL injection.
Hazard Level
Medium
Vulnerability Type
SQL注入
Affected Vendor
畅捷通
Published
2025-12-07
Last Modified
2026-02-24
References
https://vuldb.com/?id.334609 https://github.com/hacker-routing/cve/issues/2#issue-3646348225 https://vuldb.com/?ctiid.334609 https://vuldb.com/?submit.699133 https://access.redhat.com/security/cve/cve-2025-14189
Share on: