Description
MetaCRM作为一款智能化的平台型客户关系管理软件，在sql.jsp中用户输入可控导致sql注入
美特CRM6 sql.jsp存在sql注入
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ddpoc.com/DVB-2025-10491.html
https://www.redpacketsecurity.com/cve-alert-cve-2026-6629-metasoft-metacrm/
https://security.glexia.com/cves/CVE-2026-6629
https://feed.craftedsignal.io/briefs/2026-04-metasoft-crm-sql-injection/
https://zhuanlan.zhihu.com/p/1990942848875528611
https://cn-sec.com/archives/tag/%E5%AE%A2%E6%88%B7%E5%85%B3%E7%B3%BB%E7%AE%A1%E7%90%86