purple-WL/Yonyou-TurboCRM-SQL-injection

purple-WL/Yonyou-TurboCRM-SQL-injection

GitHubGitHub
GitHubgithub.com
Unavailable
This project is no longer available (or publicly accessible) from GitHub
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-41746↗
7.5 HIGH5 MEDIUM

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive database information.