PT-2025-49402
CVE-2025-14189
·
Published
2025-12-07
·
Updated
2026-10-14
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Chanjet CRM versions prior to 20251122
Description
A SQL injection issue exists in Chanjet CRM. The issue is related to the manipulation of the
gblOrgID parameter within the /tools/jxf dump table demo.php file. This manipulation affects an unknown function. The attack can be performed remotely. The exploit is publicly available.Recommendations
Versions prior to 20251122 should be updated.
Restrict access to the
/tools/jxf dump table demo.php file.
Avoid using the gblOrgID parameter until the issue is resolved.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾