CVE-2021-41746

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php

published October 29, 2021

CVSS
—
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive database information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01267 · 69.5th percentile
Published
2021-10-29T17:22Z
EPSS history
Timeline
  • 29 OCT 17:22Z
    SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php
    cvelistv5