5 matches found
CVE-2024-25897
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
9.8CVSS8AI score0.01554EPSS
SaveExploits2References1
Exploit for SQL Injection in Churchcrm
PoC exploit for CVE-2024-25897, an exploit module targeting Jenk...
9.8CVSS9.7AI score0.01554EPSS
SaveExploits2
CVE-2024-25897
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
9.8CVSS7.7AI score0.01554EPSS
SaveExploits2References1
CVE-2024-25897
ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) vulnerability within the FRCatalog.php file. The flaw is triggered via the CurrentFundraiser GET parameter in the API endpoint. This vulnerability allows an attacker to potentially perform unauthorized database queries by...
9.8CVSS8AI score0.01554EPSS
SaveExploits2References1Affected Software1
20