CVE-2024-25894

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...

CVE-2024-25894

creationtimestamp| type| source ---|---|--- 2024-02-21 19:21:58+00:00| seen| https://t.me/ctinow/189970 2024-02-21 19:26:30+00:00| seen| https://t.me/ctinow/189983 2024-02-22 19:15:02+00:00| seen| https://t.me/arpsyndicate/4009 2024-03-13 10:12:08+00:00| seen| https://t.me/ctinow/206520...

CVE-2024-25894

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...

CVE-2024-25894

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...

CVE-2024-25894

CVE-2024-25894 affects ChurchCRM 5.5.0, specifically EventEditor.php, where a time-based blind SQL injection via the EventCount POST parameter is reported. Affected item: ChurchCRM 5.5.0 /EventEditor.php; vulnerability class: Blind SQL Injection (Time-based). Underlying cause and impact are state...