4 matches found
CVE-2024-25896
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...
5.3CVSS7.7AI score0.00427EPSS
SaveExploits1References1
CVE-2024-25896
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...
8AI score0.00427EPSS
SaveExploits1References1
CVE-2024-25896
Summary: CVE-2024-25896 affects ChurchCRM 5.5.0, specifically the EventEditor.php page, where a time-based blind SQL injection can be triggered via the EID POST parameter. This is confirmed by multiple connected sources. The vulnerability is described as a time-based blind SQL injection affecting...
5.3CVSS8AI score0.00427EPSS
SaveExploits1References1Affected Software1
20