Lucene search
China National Vulnerability DatabaseCNVD-2023-64492HistoryAug 12, 2023 - 12:00 a.m.
ChurchCRM group parameter SQL injection vulnerability
2023-08-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
churchcrm
sql injection
queryview.php
vulnerability
database.
0.001 Low
EPSS
Percentile
25.0%
ChurchCRM is an open source CRM system for churches. ChurchCRM version v5.0.0 suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the group parameter of QueryView.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| churchcrm churchcrm v | eq | 5.0.0 |
Related
nvd
nvd
CVE-2023-38770
2023-08-08 16:15:13
prion
prion
Sql injection
2023-08-08 16:15:00
cve
cve
CVE-2023-38770
2023-08-08 16:15:13
osv
osv
CVE-2023-38770
2023-08-08 16:15:13
cvelist
cvelist
CVE-2023-38770
2023-08-08 00:00:00