CVE-2026-24854-ChurchCRM-6.7.2-Authenticated-Numeric-SQL-Injection

CVE-2026-24854 – ChurchCRM 认证数字型 SQL 注入（逻辑操纵）PoC 作者：Mohammed Idrees Banyamer 国家：约旦 代号：@banyamersecurity GitHub：https://github.com/mbanyamer 概述 本仓库包含一个概念验证（PoC），演示了 ChurchCRM 6.7.2 之前版本中存在的认证数字型 SQL 注入漏洞 。 该漏洞允许通过向本应为数字型的参数注入非数字载荷，实现对 SQL 查询的逻辑操纵 ，从而未经授权地修改查询行为（例如，绕过 WHERE 子句）。 CVE ID：CVE-2026-248...

Exploit for CVE-2026-24854

CVE-2026-24854 – ChurchCRM Authenticated Numeric SQL Injection...

SQL Injection Vulnerability in Nine to Five Network Website Building System

Ninety-five Network Building System is a general-purpose CMS system. The product has SQL injection vulnerability, vulnerability URL: http://target/News.asp?newskind= The vulnerability parameter is newskind , type is GET injection, numeric injection, the attacker can use the vulnerability to obtai...