Lucene search
China National Vulnerability DatabaseCNVD-2023-64496HistoryMay 11, 2023 - 12:00 a.m.
ChurchCRM SQL Injection Vulnerability (CNVD-2023-64496)
2023-05-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
1
churchcrm
sql injection
vulnerability
validation
en_tyid parameter
sensitive data
cnvd-2023-64496
0.005 Low
EPSS
Percentile
77.0%
ChurchCRM is an open source CRM system for churches. ChurchCRM version 4.5.4 suffers from a SQL injection vulnerability that stems from a lack of validation of the EN_tyid parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| churchcrm churchcrm | eq | 4.5.4 |
Related
zdt
zdt
ChurchCRM 4.5.4 SQL Injection Exploit
2023-10-16 00:00:00
cvelist
cvelist
CVE-2023-29842
2023-05-04 00:00:00
nvd
nvd
CVE-2023-29842
2023-05-04 03:15:09
packetstorm
packetstorm
ChurchCRM 4.5.4 SQL Injection
2023-10-16 00:00:00
cve
cve
CVE-2023-29842
2023-05-04 03:15:09
prion
prion
Sql injection
2023-05-04 03:15:00
osv
osv
CVE-2023-29842
2023-05-04 03:15:09