51mis records

11 published records for vendor 51mis.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 36.4%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
22Monitor	CVE-2025-5005No exploit	Shanghai Lingdang Information Technology Lingdang CRM index_event.php server-side request forgery51mis · lingdang crm · CWE-918 Pre-auth SSRF	Medium5.5	—	0.5%	Sep 9, 2025
21Monitor	CVE-2024-11123No exploit	上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal51mis · lingdang crm · CWE-22 Path traversal	Medium5.3	—	1.0%	Nov 12, 2024
21Monitor	CVE-2025-0461No exploit	Shanghai Lingdang Information Technology Lingdang CRM index.php path traversal51mis · lingdang crm · CWE-22 Path traversal	Medium5.3	—	0.9%	Jan 14, 2025
21Monitor	CVE-2024-11121No exploit	上海灵当信息科技有限公司 Lingdang CRM index.php sql injection51mis · lingdang crm · CWE-74 SQL injection	Medium5.3	—	0.6%	Nov 12, 2024
21Monitor	CVE-2024-11122No exploit	上海灵当信息科技有限公司 Lingdang CRM index.php unrestricted upload51mis · lingdang crm · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.6%	Nov 12, 2024
21Monitor	CVE-2025-0462No exploit	Shanghai Lingdang Information Technology Lingdang CRM index.php sql injection51mis · lingdang crm · CWE-74 SQL injection	Medium5.3	—	0.5%	Jan 14, 2025
21Monitor	CVE-2025-0463No exploit	Shanghai Lingdang Information Technology Lingdang CRM index.php unrestricted upload51mis · lingdang crm · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.4%	Jan 14, 2025
21Monitor	CVE-2025-8219No exploit	Shanghai Lingdang Information Technology Lingdang CRM HTTP POST Request tabdetail_moduleSave_dxkp.php sql injection51mis · lingdang crm · CWE-74 SQL injection	Medium5.3	—	0.4%	Jul 26, 2025
8Monitor	CVE-2025-9140Proof of concept	Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injection51mis · lingdang crm · CWE-74 SQL injection	Low2.1	—	0.5%	Aug 19, 2025
8Monitor	CVE-2025-8908No exploit	Shanghai Lingdang Information Technology Lingdang CRM event.php sql injection51mis · lingdang crm · CWE-74 SQL injection	Low2.1	—	0.3%	Aug 13, 2025
8Monitor	CVE-2025-8345No exploit	Shanghai Lingdang Information Technology Lingdang CRM yunzhijiaApi.php delete_user sql injection51mis · lingdang crm · CWE-74 SQL injection	Low2.1	—	0.3%	Jul 30, 2025

CVE-2025-5005
22Monitor
Shanghai Lingdang Information Technology Lingdang CRM index_event.php server-side request forgery
MediumCVSS 5.5No exploitEPSS 0%
- Pre-auth
- SSRF
51mis · lingdang crmSep 9, 2025
CVE-2024-11123
21Monitor
上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal
MediumCVSS 5.3No exploitEPSS 1%
- Path traversal
51mis · lingdang crmNov 12, 2024
CVE-2025-0461
21Monitor
Shanghai Lingdang Information Technology Lingdang CRM index.php path traversal
MediumCVSS 5.3No exploitEPSS 1%
- Path traversal
51mis · lingdang crmJan 14, 2025
CVE-2024-11121
21Monitor
上海灵当信息科技有限公司 Lingdang CRM index.php sql injection
MediumCVSS 5.3No exploitEPSS 1%
- SQL injection
51mis · lingdang crmNov 12, 2024
CVE-2024-11122
21Monitor
上海灵当信息科技有限公司 Lingdang CRM index.php unrestricted upload
MediumCVSS 5.3No exploitEPSS 1%
- File upload
- Broken access control (IDOR)
51mis · lingdang crmNov 12, 2024
CVE-2025-0462
21Monitor
Shanghai Lingdang Information Technology Lingdang CRM index.php sql injection
MediumCVSS 5.3No exploitEPSS 0%
- SQL injection
51mis · lingdang crmJan 14, 2025
CVE-2025-0463
21Monitor
Shanghai Lingdang Information Technology Lingdang CRM index.php unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
51mis · lingdang crmJan 14, 2025
CVE-2025-8219
21Monitor
Shanghai Lingdang Information Technology Lingdang CRM HTTP POST Request tabdetail_moduleSave_dxkp.php sql injection
MediumCVSS 5.3No exploitEPSS 0%
- SQL injection
51mis · lingdang crmJul 26, 2025
CVE-2025-9140
8Monitor
Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injection
LowCVSS 2.1Proof of conceptEPSS 0%
- SQL injection
51mis · lingdang crmAug 19, 2025
CVE-2025-8908
8Monitor
Shanghai Lingdang Information Technology Lingdang CRM event.php sql injection
LowCVSS 2.1No exploitEPSS 0%
- SQL injection
51mis · lingdang crmAug 13, 2025
CVE-2025-8345
8Monitor
Shanghai Lingdang Information Technology Lingdang CRM yunzhijiaApi.php delete_user sql injection
LowCVSS 2.1No exploitEPSS 0%
- SQL injection
51mis · lingdang crmJul 30, 2025