Unrated severityNVD Advisory· Published Oct 29, 2021· Updated Aug 4, 2024
CVE-2021-41746
CVE-2021-41746
Description
SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive database information.
Affected products
1Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/purple-WL/Yonyou-TurboCRM-SQL-injection/issues/1mitrex_refsource_MISC
- www.cnvd.org.cn/flaw/show/CNVD-2020-21956mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.