5 matches found
EUVD-2024-23199
Malicious code in bioql PyPI...
9.8CVSS9AI score0.01554EPSS
SaveExploits2References1
CVE-2024-25897
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
9.8CVSS7.7AI score0.01554EPSS
SaveExploits2References1
Sql injection
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
8.8AI score0.01554EPSS
SaveExploits2References1
CVE-2024-25897
CVE-2024-25897 affects ChurchCRM 5.5.0, specifically the FRCatalog.php endpoint where a time-based blind SQL injection is exploitable via the CurrentFundraiser GET parameter. Attack surface: web/API call to FRCatalog.php with CurrentFundraiser values can yield high-impact exposure (as reflected i...
9.8CVSS8AI score0.01554EPSS
SaveExploits2References1Affected Software1
20