Security Advisory

CVE-2021-41746

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-29 17:22:28
Last updated 2024-08-04 03:15:29
Assigner mitre
State PUBLISHED

Description

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive database information.