SQL Injection Vulnerability in Lingdang CRM by Shanghai Lingdang Information Technology

CVE-2025-8219

What is CVE-2025-8219?

A vulnerability has been identified in Lingdang CRM, specifically in the /crm/crmapi/erp/tabdetail_moduleSave_dxkp.php HTTP POST Request Handler. This issue arises from insufficient validation of input parameters, allowing attackers to manipulate the 'getvaluestring' argument, leading to potential SQL injection attacks. Such attacks can be executed remotely, posing a significant risk to data integrity and confidentiality. It is crucial for users of affected versions to upgrade to version 8.6.5.2 or later, which includes robust security enhancements through the implementation of parameterized queries and improved input sanitization.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References