6 matches found
EUVD-2024-23199
Malicious code in bioql PyPI...
CVE-2024-25897
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
Sql injection
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
CVE-2024-25897: Improper Neutralization of Special Elements used in an SQL Command
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
CVE-2024-25897
ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) vulnerability within the FRCatalog.php file. The flaw is triggered via the CurrentFundraiser GET parameter in the API endpoint. This vulnerability allows an attacker to potentially perform unauthorized database queries by...
