CyberRota Analysis
AI-GeneratedChanjet CRM is vulnerable to an unauthenticated SQL injection due to insufficient input sanitization of the site_id GET parameter in its webservice endpoint. This flaw allows remote attackers to execute arbitrary SQL queries, potentially leading to the extraction of sensitive data from the database. Organizations using Chanjet CRM should prioritize patching this vulnerability to mitigate the risk of data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the site_id GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization or parameterization through UNION-based injection techniques to extract sensitive data from the underlying database. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.