CVE-2025-8219

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. It has been rated as critical. This issue affects some unknown processing of the file /crm/crmapi/erp/tabdetail_moduleSave_dxkp.php of the component HTTP POST Request Handler. The manipulation of the argument getvaluestring leads to sql injection. The attack may be initiated remotely. Upgrading to version 8.6.5.2 is able to address this issue. It is recommended to upgrade the affected component. The vendor explains: "All SQL injection vectors were patched via parameterized queries and input sanitization in v8.6.5+. We strongly advise all customers to upgrade to the current version (v8.6.5.2), which includes this fix and additional security enhancements."

• CWE-74
• CWE-89
• CWE-89

• https://vuldb.com/?ctiid.317807Permissions Required, VDB Entry
• https://vuldb.com/?id.317807Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.616140Third Party Advisory, VDB Entry
• https://www.notion.so/SQL-Injection-Vulnerability-in-Lingdang-CRM-231ac9e8711e8017ab4ee3bb5f4aab0b?source=copy_linkBroken Link

Published

Jul 27, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8213The NinjaScanner – Virus & Malware scan plugin for WordPress…7.2
• CVE-2025-8214The The Pack Elementor addon plugin for WordPress is vulnera…6.4
• CVE-2025-8215The Responsive Addons for Elementor plugin for WordPress is …6.4
• CVE-2025-8216The Sky Addons for Elementor plugin for WordPress is vulnera…6.4
• CVE-2025-8217The Amazon Q Developer Visual Studio Code (VS Code) extensio…5.1
• CVE-2025-8218The Real Spaces - WordPress Properties Directory Theme theme…8.8
• CVE-2025-8220A vulnerability has been found in Engeman Web up to 12.0.0.2…9.4
• CVE-2025-8221A vulnerability classified as problematic was found in jerry…6.1
• CVE-2025-8222A vulnerability, which was classified as problematic, has be…5.4
• CVE-2025-8223A vulnerability, which was classified as problematic, was fo…4.3
• CVE-2025-8224A vulnerability has been found in GNU Binutils 2.44 and clas…5.5
• CVE-2025-8225A vulnerability was found in GNU Binutils 2.44 and classifie…3.3