6 matches found
CVE-2024-25893
ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
CVE-2024-25893
ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
PT-2024-21186
Name of the Vulnerable Software and Affected Versions ChurchCRM version 5.5.0 Description The issue concerns a Blind SQL Injection vulnerability, specifically time-based, in the FRCertificates.php file. This vulnerability can be exploited via the CurrentFundraiser GET parameter. Recommendations F...
CVE-2024-25893: Improper Neutralization of Special Elements used in an SQL Command
ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...
CVE-2024-25893
ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) . The flaw exists in the FRCertificates.php page due to improper neutralization of special elements in the CurrentFundraiser GET parameter. This allows an attacker to potentially execute arbitrary SQL commands. Exploitati...
