6 matches found
EUVD-2024-23199
Malicious code in bioql PyPI...
CVE-2024-25897
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
Sql injection
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
CVE-2024-25897
ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) . The flaw exists in the FRCatalog.php file and can be triggered via the CurrentFundraiser GET parameter in the API endpoint. This vulnerability allows an attacker to execute SQL queries that cause the application to paus...
CVE-2024-25897: Improper Neutralization of Special Elements used in an SQL Command
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...