Chanjet CRM SQL Injection Vulnerability in New Activity Edit File

A critical SQL injection vulnerability has been identified in Chanjet CRM versions prior to 20250510. The issue arises in the file '/activity/newActivityedit.php' when the 'gblOrgID' argument is manipulated. This vulnerability can be exploited remotely, allowing attackers to interfere with the application's database queries.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.