SQL Injection Vulnerability in Chanjet CRM Login Page
CVE-2025-7915

7.3HIGH

Key Information:

Vendor

Changjietong Information Technology Co., Ltd

Status
Chanjet CRM
Vendor
CVE Published:
21 July 2025

What is CVE-2025-7915?

A vulnerability exists in the Chanjet CRM product that allows attackers to exploit the mailinactive.php file associated with the Login Page. This SQL injection flaw enables remote attackers to manipulate SQL queries, potentially compromising the database. As this issue has been publicly disclosed, it poses a significant risk if left unaddressed. Organizations using affected versions should prioritize patching to mitigate potential exploitation.

References

https://github.com/qiantx/cve/blob/main/cve4.md
https://vuldb.com/?ctiid.317030
https://vuldb.com/?id.317030

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-7915 : SQL Injection Vulnerability in Chanjet CRM Login Page