Lucene search
CVE-2023-38762
SQL injection vulnerability in ChurchCRM v.5.0.0 allows remote attacker to obtain sensitive information via friendmonths parameter in QueryView.ph
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2023-38762 | 8 Aug 202300:00 | – | cvelist |
 | CVE-2023-38762 | 8 Aug 202300:00 | – | vulnrichment |
 | ChurchCRM friendmonths parameter SQL Injection Vulnerability | 12 Aug 202300:00 | – | cnvd |
 | Sql injection | 8 Aug 202316:15 | – | prion |
 | CVE-2023-38762 | 8 Aug 202316:15 | – | osv |
 | CVE-2023-38762 | 8 Aug 202316:15 | – | cve |
| Source | Link |
|---|---|
| github | www.github.com/0x72303074/CVE-Disclosures |
| github | www.github.com/ChurchCRM/CRM/wiki |
| churchcrm | www.churchcrm.io/ |
| demo | www.demo.churchcrm.io/master |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo08 Aug 2023 16:15Current
7.5High risk
Vulners AI Score7.5
CVSS37.5
EPSS0.00133