3 matches found
CVE-2024-25892
ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection Time-based via the familyId GET parameter...
8.1CVSS8.1AI score0.00576EPSS
SaveExploits1References1
CVE-2024-25892
ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection Time-based via the familyId GET parameter...
8.1CVSS7.7AI score0.00576EPSS
SaveExploits1References1
CVE-2024-25892
ChurchCRM 5.5.0 is affected by a Blind SQL Injection (time-based) in ConfirmReport.php, exploitable via the familyId GET parameter. The CVE indicates a high-severity issue with impact on confidentiality, integrity, and availability, and a network attack vector with no user interaction required. R...
8.1CVSS8AI score0.00576EPSS
SaveExploits1References1Affected Software1
20