Sql injection

2023-02-0922:15:00

PRIOn knowledge base

www.prio-n.com

churchcrm v4.5.3

sql injection

eid parameter

gettext.php

vulnerability

nvd

0.001 Low

EPSS

Percentile

44.9%

ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php.

CPENameOperatorVersion
churchcrmle4.5.3

CPE	Name	Operator	Version
	churchcrm	le	4.5.3

References

churchcrm.io/

github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md

github.com/ChurchCRM/CRM

0.001 Low

EPSS

Percentile

44.9%

Related for PRION:CVE-2023-24684