5 matches found
CVE-2024-25894
ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...
CVE-2024-25894
creationtimestamp| type| source ---|---|--- 2024-02-21 19:21:58+00:00| seen| https://t.me/ctinow/189970 2024-02-21 19:26:30+00:00| seen| https://t.me/ctinow/189983 2024-02-22 19:15:02+00:00| seen| https://t.me/arpsyndicate/4009 2024-03-13 10:12:08+00:00| seen| https://t.me/ctinow/206520...
CVE-2024-25894
ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...
CVE-2024-25894
ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) flaw located in the /EventEditor.php page. The vulnerability is triggered via the EventCount POST parameter , allowing an attacker to execute arbitrary SQL commands. Exploitation details and specific remediation steps are...
