Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cnvdChina National Vulnerability DatabaseCNVD-2023-64045
HistoryAug 15, 2023 - 12:00 a.m.

ChurchCRM CSV Injection Vulnerability (CNVD-2023-64045)

2023-08-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
churchcrm
csv injection
vulnerability

0.002 Low

EPSS

Percentile

54.1%

JSON

ChurchCRM is an open source CRM system for churches. ChurchCRM version 4.2.0 suffers from a CSV injection vulnerability that originates from improperly neutralized formula elements in a CSV file, which can be exploited by a remote attacker to execute arbitrary code via a crafted CSV file.

CPENameOperatorVersion
churchcrm churchcrmeq4.2.0

Related

osv 1
cvelist 1
prion 1
cve 1
nvd 1
osv
osv
CVE-2020-28848
2023-08-11 14:15:11
cvelist
cvelist
CVE-2020-28848
2023-08-11 00:00:00
prion
prion
Design/Logic Flaw
2023-08-11 14:15:00
cve
cve
CVE-2020-28848
2023-08-11 14:15:11
nvd
nvd
CVE-2020-28848
2023-08-11 14:15:11

0.002 Low

EPSS

Percentile

54.1%

JSON
Related for CNVD-2023-64045
osv1cvelist1prion1cve1nvd1