An unauthenticated SQL injection vulnerability in Chanjet CRM 1.0 poses a high risk of unauthorized database access and potential data compromise.

The application fails to properly sanitize user-supplied input in the /mail/mailinactive.php file. This allows an unauthenticated attacker to inject malicious SQL commands via the application login page.

Successful exploitation of this vulnerability allows an attacker to interact directly with the backend database, potentially leading to the unauthorized disclosure or modification of sensitive corporate data. With a CVSS score of 7.3, this flaw represents a significant risk to organizational confidentiality and integrity, as it provides a direct path for data exfiltration without requiring valid user credentials.

Immediate Action: Since a specific patch is currently unknown, administrators should restrict network access to the affected /mail/mailinactive.php endpoint and monitor the application for suspicious database queries.

Proactive Monitoring: Review web server access logs for requests to /mail/mailinactive.php containing SQL-related keywords such as SELECT, SLEEP, or UNION.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block or sanitize requests targeting the vulnerable file, specifically looking for common SQL injection patterns in the request parameters.

Public Exploit Available: Yes, a functional proof-of-concept is publicly available via a researcher-published technical write-up on GitHub.

Given the availability of a public proof-of-concept and the unauthenticated nature of the exploit, this vulnerability should be prioritized for mitigation. Organizations currently running Chanjet CRM version 1.0 must restrict public access to the application login interface immediately and engage the vendor for official patch availability. Failure to restrict access exposes the backend database to trivial remote exploitation.