Description
灵当CRM系统接口yunzhijiaApi.php存在sql注入，允许攻击者通过恶意构造的sql语句操控数据库，从而导致数据泄露、篡改或破坏，严重威胁系统安全
灵当 CRM /crm/WeiXinApp/yunzhijia/yunzhijiaApi.php SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/weixin_65311462/article/details/142532387
https://nvd.nist.gov/vuln/detail/CVE-2025-8345
https://github.com/advisories/GHSA-4692-rqch-8m26
https://www.cvedetails.com/cve/CVE-2025-8345/
https://radar.offseq.com/threat/cve-2025-8345-sql-injection-in-shanghai-lingdang-i-0c52a08d
https://dbugs.ptsecurity.com/vulnerability/PT-2025-31468
https://cn-sec.com/archives/3184395.html
https://wiki.shikangsi.com/post/share/4d05b8c3-5464-48f3-bb14-a852b6e70abc