Lucene search
+L

7 matches found

CNVD
CNVD
•added 2023/08/12 12:00 a.m.•55 views

NETGEAR DGN3500 Buffer Overflow Vulnerability

The NETGEAR DGN3500 is a wireless router from NETGEAR. The NETGEAR DGN3500 version 1.1.00.37 suffers from a buffer overflow vulnerability, which originates from the httppassword parameter in setup.cgi failing to properly validate the length of the input data, which can be exploited by a remote...

6.5CVSS7.2AI score0.00677EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/08/08 4:15 p.m.•15 views

CVE-2023-38764

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

7.5CVSS5.8AI score0.00971EPSS
SaveExploits0References5
Prion
Prion
•added 2023/08/08 4:15 p.m.•37 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

5CVSS7.5AI score0.00971EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2023/08/08 12:00 a.m.•49 views

CVE-2023-38764

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

7.8AI score0.00971EPSS
SaveExploits0References4
Mend
Mend
•added 2023/08/08 12:00 a.m.•9 views

CVE-2023-38764

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

8.7CVSS0.00971EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/08 12:00 a.m.•6 views

CVE-2023-38764: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

7.5CVSS7.3AI score0.00971EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/08 12:00 a.m.•8 views

PT-2023-26592

Name of the Vulnerable Software and Affected Versions ChurchCRM version 5.0.0 Description A SQL injection issue allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the "/QueryView.php" API endpoint. Recommendations For ChurchCRM version 5.0.0,...

7.5CVSS0.00971EPSS
SaveExploits0References11
Rows per page
Query Builder