Lucene search

K
cvelistMitreCVELIST:CVE-2023-38763
HistoryAug 08, 2023 - 12:00 a.m.

CVE-2023-38763

2023-08-0800:00:00
mitre
www.cve.org
vulnerability
churchcrm
remote attacker
sensitive information
fundraiserid parameter
fundraisereditor.php endpoint

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the FundRaiserID parameter within the /FundRaiserEditor.php endpoint.

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

Related for CVELIST:CVE-2023-38763