3 matches found
CVE-2024-25891
ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
7.5CVSS8AI score
SaveExploits0References3
CVE-2024-25891
The open-source church management system ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) . The flaw exists in the FRBidSheets.php page due to improper neutralization of special elements in the CurrentFundraiser GET parameter. An attacker can exploit this by constructin...
7.5CVSS8AI score0.00578EPSS
SaveExploits1References1Affected Software1
20