4 matches found
CVE-2024-25896
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...
5.3CVSS7.7AI score0.00427EPSS
SaveExploits1References1
CVE-2024-25896
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...
8AI score0.00427EPSS
SaveExploits1References1
CVE-2024-25896
ChurchCRM version 5.5.0 is vulnerable to a Time-based Blind SQL Injection vulnerability located in the EventEditor.php file. The root cause is the improper neutralization of special elements used in an SQL command via the EID POST parameter. This flaw can be exploited to gain unauthorized access ...
5.3CVSS8AI score0.00427EPSS
SaveExploits1References1Affected Software1
20