9.4 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.0%
ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection (Time-based) via the EN_tyid POST parameter.
packetstormsecurity.com/files/175105/ChurchCRM-4.5.4-SQL-Injection.html
github.com/arvandy/CVE/blob/main/CVE-2023-29842/CVE-2023-29842.md
github.com/arvandy/CVE/blob/main/CVE-2023-29842/CVE-2023-29842.py
github.com/ChurchCRM/CRM