Lucene search

CVE-2024-39304

🗓️ 26 Jul 2024 18:03:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

ChurchCRM 5.9.2 SQL injection vulnerability in /GetText.ph

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
GithubExploit	Exploit for SQL Injection in Churchcrm	31 Jul 202414:48	–	githubexploit
CNVD	ChurchCRM SQL Injection Vulnerability (CNVD-2024-35168)	31 Jul 202400:00	–	cnvd
Vulnrichment	CVE-2024-39304 ChurchCRM SQL Injection Vulnerability	26 Jul 202417:31	–	vulnrichment
NVD	CVE-2024-39304	26 Jul 202418:15	–	nvd
NVD	CVE-2024-39306	19 Aug 202414:15	–	nvd
Cvelist	CVE-2024-39304 ChurchCRM SQL Injection Vulnerability	26 Jul 202417:31	–	cvelist
OSV	CVE-2024-39304	26 Jul 202418:15	–	osv
CVE	CVE-2024-39306	19 Aug 202414:15	–	cve

Nvd

Vulners

Vulnrichment

Node

churchcrm churchcrmRange<5.9.2

[
  {
    "vendor": "ChurchCRM",
    "product": "CRM",
    "versions": [
      {
        "version": "< 5.9.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/ChurchCRM/CRM/commit/e3bd7bfbf33f01148df0ef1acdb0cf2c2b878b08
github	www.github.com/ChurchCRM/CRM/security/advisories/GHSA-2rh6-gr3h-83j9

Parameter	Position	Path	Description	CWE
EID	query param	/GetText.php	SQL injection vulnerability due to inadequate sanitization of the EID parameter in a GET request.	CWE-89

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jul 2024 18:15Current

9High risk

Vulners AI Score9

CVSS38.8

EPSS0.0054

SSVC

CWE-89