ChurchCRM CartToFamily.php File SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the PersonAddress parameter in the src/CartToFamily.php file. No details of the vulnerability are provided at...

EUVD-2016-4463

Malware in sbrugna...

Unspecified Vulnerability in Oracle E-Business Suite CRM Wireless Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. An unspecified vulnerability in the Person Address Page subcomponent of the Oracle CRM Wireless component of Oracle E-Business Suite version 12.1.3 ca...

CVE-2016-3437

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page...

CVE-2016-3437

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page...

Design/Logic Flaw

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page...

CVE-2016-3437

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page...

CVE-2016-3437

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page...

CVE-2016-3437

CVE-2016-3437 concerns Oracle E-Business Suite 12.1.3, specifically the CRM Wireless component’s Person Address Page. The vulnerability is described as unspecified, allowing remote access to affect confidentiality and integrity via the Person Address Page vectors. Connected sources confirm affect...