3 matches found
CVE-2024-25892
ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection Time-based via the familyId GET parameter...
8.1CVSS8.1AI score0.00576EPSS
SaveExploits1References1
CVE-2024-25892
ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection Time-based via the familyId GET parameter...
8.1CVSS7.7AI score0.00576EPSS
SaveExploits1References1
CVE-2024-25892
The open-source CRM system ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) . The root cause is the improper neutralization of special elements used in an SQL command within the ConfirmReport.php page, specifically via the familyId GET parameter. Exploitation of this vu...
8.1CVSS8AI score0.00576EPSS
SaveExploits1References1Affected Software1
20