https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13788.htmlhttps://patchthecve.com/cve/CVE-2025-13788.htmlSun, 18 Oct 2026 18:10:00 +0000HIGH 7.3: A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and https://patchthecve.com/cve/CVE-2025-7915.htmlhttps://patchthecve.com/cve/CVE-2025-7915.htmlWed, 17 Jun 2026 10:05:57 +0000HIGH 7.3: A vulnerability was found in Chanjet CRM 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mail/mailinactive.php of the component Login Page. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed thttps://patchthecve.com/cve/CVE-2025-6132.htmlhttps://patchthecve.com/cve/CVE-2025-6132.htmlWed, 17 Jun 2026 10:01:13 +0000HIGH 7.3: A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit ha