EUVD-2023-28694

Malicious code in bioql PyPI...

CVE-2023-24684

ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php...

CVE-2024-39304 ChurchCRM SQL Injection Vulnerability

ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an improper sanitization of user input. Authentication is required, but no elevated privileges are necessary. This allows attackers to inject SQ...

CVE-2024-39304: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an improper sanitization of user input. Authentication is required, but no elevated privileges are necessary. This allows attackers to inject SQ...

CVE-2023-24684

ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php...

Sql injection

ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php...

PT-2023-19735

Name of the Vulnerable Software and Affected Versions ChurchCRM versions 4.5.3 and below Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the EID parameter at the "GetText.php" endpoint. Recommendations For ChurchCRM versions 4.5.3 and...

CVE-2023-24684

ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php...

CVE-2023-24684

CVE-2023-24684 affects ChurchCRM v4.5.3 and earlier, with a SQL injection vulnerability exploitable via the EID parameter in GetText.php. The issue is documented across multiple sources (NVD, RH, OSV, CNNVD, CVE records) as a high-severity flaw (CVSS v3.1: 7.2) with network access, low attack com...

CVE-2023-24684

ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php...

ChurchCRM SQL注入漏洞

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM v4.5.3 and earlier versions that stems from the presence of a SQL injection vulnerability via the EID parameter in GetText.php...

CVE-2023-24684: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php...

PHP gettext 1.0.12 Code Execution

CVE-2016-6175 gettext.php | @kmkzsecurity Project Homepage: https://launchpad.net/php-gettext/ Download: https://launchpad.net/php-gettext/trunk/1.0.12/+download/php-gettext-1.0.12.tar.gz Version: 1.0.12 latest release Tested on: Linux Debian, PHP 5.6.19-2+b1 CVSS: 7.1 OVE ID: OVE-20160705-0004 C...

WebPagetest 'file' parameter Local File Disclosure Vulnerability

WebPagetest is prone to local file disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WebPagetest 2.7 Local File Disclosure

Author: TUNISIAN CYBER + Exploit Title: WebPagetest 2.7 LFD Vulnerability + Date: 24-12-2013 + Category: WebApp + Vendor: http://code.google.com/p/webpagetest/downloads/detail?name=webpagetest2.7.zip&can=2&q= + Google Dork: n/a + Tested on: KaliLinux/Debian 3.7.2 + Friend's blog:...