CVE-2024-25891

ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter in the FRBidSheets.php page. An attacker can exploit this by constructing a malicious request to perform a SQL injection attack, which may result in the disclosure of database infor...

CVE-2024-25891

ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...

CVE-2024-25894: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...

CVE-2024-25896

ChurchCRM version 5.5.0 is vulnerable to a Time-based Blind SQL Injection vulnerability located in the EventEditor.php file. The root cause is the improper neutralization of special elements used in an SQL command via the EID POST parameter. This flaw can be exploited to gain unauthorized access ...

CVE-2024-25893

ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...

CVE-2024-25893

ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...

CVE-2024-25892: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection Time-based via the familyId GET parameter...

CVE-2024-25896: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...

CVE-2024-25891: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...

CVE-2024-25894

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...

CVE-2024-25893

ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) . The flaw exists in the FRCertificates.php page due to improper neutralization of special elements in the CurrentFundraiser GET parameter. This allows an attacker to potentially execute arbitrary SQL commands. Exploitati...

CVE-2024-25892

The open-source CRM system ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) . The root cause is the improper neutralization of special elements used in an SQL command within the ConfirmReport.php page, specifically via the familyId GET parameter. Exploitation of this vu...

CVE-2024-25894

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...

JFrog Artifactory < 7.25.4 - Blind SQL Injection

Exploit Title: artifactory low-privileged blind sql injection Google Dork: Date: Exploit Author: ardr Vendor Homepage:https://jfrog.com/help/r/jfrog-release-information/cve-2021-3860-artifactory-low-privileged-blind-sql-injection Software Link:...

JFrog Artifactory < 7.25.4 - Blind SQL Injection Exploit

Exploit Title: artifactory low-privileged blind sql injection Exploit Author: ardr Vendor Homepage:https://jfrog.com/help/r/jfrog-release-information/cve-2021-3860-artifactory-low-privileged-blind-sql-injection Software Link:...

Sql injection

Blind SQL Injection vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component...

CVE-2023-48987: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL Injection vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component...

Amazon Linux AMI : cacti (ALAS-2024-1915)

The version of cacti installed on the remote host is prior to 1.1.19-6.24. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1915 advisory. Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection SQLi vulnerabili...

Important: cacti

Issue Overview: Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection SQLi vulnerability within the SNMP Notification Receivers feature in the file 'managers.php'. An authenticated attacker with the "Settings/Utilities" permission can se...

CVE-2023-50030

In the module "Jms Setting" jmssetting from Joommasters for PrestaShop, a guest can perform SQL injection in versions = 1.1.0. The method JmsSetting::getSecondImgs has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection...