Metasoft

Metacrm

13 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-16324

Exploit
  • EPSS 0.28%
  • Veröffentlicht 20.07.2026 21:45:34
  • Zuletzt bearbeitet 22.07.2026 15:16:53

A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation of the argument File leads to unrestricted upload. The attack may be la...

7.5

CVE-2026-15514

Exploit
  • EPSS 0.25%
  • Veröffentlicht 12.07.2026 23:45:35
  • Zuletzt bearbeitet 13.07.2026 17:17:13

A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCService.query of the file /customizemt/xkq/rpc.jsp of the component PHPRPC Remote Call Interface. Executing a manipulation of the a...

6.5

CVE-2026-10205

Exploit
  • EPSS 0.2%
  • Veröffentlicht 01.06.2026 00:00:39
  • Zuletzt bearbeitet 22.07.2026 07:10:00

A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is an unknown function of the file develop/systparam/softlogo/upload.jsp. Such manipulation leads to unrestricted upload. The attack may be launched remot...

7.3

CVE-2026-8758

Exploit
  • EPSS 0.28%
  • Veröffentlicht 17.05.2026 13:45:36
  • Zuletzt bearbeitet 18.05.2026 17:51:10

A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This impacts an unknown function of the file /common/jsp/upload3.jsp. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launche...

7.3

CVE-2026-6629

Exploit
  • EPSS 0.26%
  • Veröffentlicht 20.04.2026 10:15:19
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects the function Statement.executeUpdate of the file sql.jsp of the component Interface. Such manipulation of the argument sql leads to sql injection. The att...

9.8

CVE-2025-7879

Exploit
  • EPSS 0.51%
  • Veröffentlicht 20.07.2025 09:15:24
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mobileupload.jsp. The manipulation of the argument File leads to unrestricted uploa...

8.8

CVE-2025-7880

Exploit
  • EPSS 0.38%
  • Veröffentlicht 20.07.2025 09:14:05
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2 and classified as critical. Affected by this issue is some unknown functionality of the file /business/common/sms/sendsms.jsp. The manipulation of the argument File leads to unrestricted ...

8.8

CVE-2025-7878

Exploit
  • EPSS 0.49%
  • Veröffentlicht 20.07.2025 08:32:05
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability, which was classified as critical, was found in Metasoft 美特软件 MetaCRM up to 6.4.2. Affected is an unknown function of the file /common/jsp/upload2.jsp. The manipulation of the argument File leads to unrestricted upload. It is possible...

9.8

CVE-2025-7877

Exploit
  • EPSS 0.51%
  • Veröffentlicht 20.07.2025 08:15:24
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability, which was classified as critical, has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This issue affects some unknown processing of the file sendfile.jsp. The manipulation of the argument File leads to unrestricted upload. The attac...

9.8

CVE-2025-7876

Exploit
  • EPSS 0.67%
  • Veröffentlicht 20.07.2025 07:44:05
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability classified as critical was found in Metasoft 美特软件 MetaCRM up to 6.4.2. This vulnerability affects the function AnalyzeParam of the file download.jsp. The manipulation of the argument p leads to deserialization. The attack can be initi...