CVE-2026-84111

Name of the Vulnerable Software and Affected Versions Chanjet CRM versions prior to 20260707

Description An issue exists in the processing of the file 'jxf dump table.php' where manipulation of the gblOrgID argument allows for remote SQL injection. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to view, modify, or delete data from the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the gblOrgID argument in the 'jxf dump table.php' file to minimize the risk of exploitation.