CVE-2023-38765

creationtimestamp| type| source ---|---|--- 2023-08-08 20:14:15+00:00| seen| https://t.me/cibsecurity/68005...

CVE-2023-38765

The vulnerability CVE-2023-38765 is a SQL injection in ChurchCRM v5.0.0, exploitable via the membermonth parameter in /QueryView.php. The root cause is unsafe handling of user input leading to unauthorized access to sensitive data. Impact is limited to information disclosure as described; no expl...

CVE-2023-38765

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php...

CVE-2023-38765

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php...

CVE-2023-38765

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php...