CVE-2025-7915: Chanjet CRM Login Page mailinactive.php sql injection

Published Jul 21, 2025

Updated

A vulnerability was found in Chanjet CRM 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mail/mailinactive.php of the component Login Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Chanjet CRM

Chanjet Chanjet CRM=1.0

Event History

Jul 21, 2025

CVE Published

via MITRE·12:32 AM

Data Sourced

via MITRE·12:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 18, 58473

Event

via NVD·10:51 PM

Frequently Asked Questions

What is the severity of CVE-2025-7915?

CVE-2025-7915 is classified as a critical vulnerability due to its potential for remote SQL injection attacks.

How does CVE-2025-7915 vulnerability affect Chanjet CRM?

CVE-2025-7915 affects the login functionality of Chanjet CRM 1.0 through an SQL injection in the /mail/mailinactive.php file.

What are the potential impacts of exploiting CVE-2025-7915?

Exploiting CVE-2025-7915 may allow an attacker to manipulate the database and gain unauthorized access to sensitive data.

How can I mitigate the risk of CVE-2025-7915?

To mitigate the risk of CVE-2025-7915, ensure that Chanjet CRM is updated to the latest version and review database queries for safety.

Is CVE-2025-7915 exploitable remotely?

Yes, CVE-2025-7915 can be exploited remotely, making it crucial to address the vulnerability promptly.