Lucene search
K

61 matches found

NVD
NVD
added 2023/08/08 4:15 p.m.11 views

CVE-2023-38762

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView.php...

7.5CVSS7.5AI score0.00084EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2023/08/08 4:15 p.m.1 views

CVE-2023-38767

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the 'value' and 'custom' parameters within the /QueryView.php...

7.5CVSS5.8AI score0.00084EPSS
Exploits0References5
OSV
OSV
added 2023/08/08 4:15 p.m.14 views

CVE-2023-38765

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php...

7.5CVSS7.6AI score
Exploits0References4
NVD
NVD
added 2023/08/08 4:15 p.m.9 views

CVE-2023-38764

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

7.5CVSS7.6AI score0.00084EPSS
Exploits0References4
OSV
OSV
added 2023/08/08 4:15 p.m.12 views

CVE-2023-38767

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the 'value' and 'custom' parameters within the /QueryView.php...

7.5CVSS7.6AI score
Exploits0References4
OSV
OSV
added 2023/08/08 4:15 p.m.16 views

CVE-2023-38762

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView.php...

7.5CVSS7.6AI score
Exploits0References4
OSV
OSV
added 2023/08/08 4:15 p.m.13 views

CVE-2023-38760

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role and gender parameters within the /QueryView.php component...

7.5CVSS7.6AI score
Exploits0References4
NVD
NVD
added 2023/08/08 4:15 p.m.12 views

CVE-2023-38767

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the 'value' and 'custom' parameters within the /QueryView.php...

7.5CVSS7.6AI score0.00084EPSS
Exploits0References4
OSV
OSV
added 2023/08/08 4:15 p.m.14 views

CVE-2023-38764

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

7.5CVSS7.6AI score
Exploits0References4
Prion
Prion
added 2023/08/08 4:15 p.m.17 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group parameter within the /QueryView.php...

5CVSS7.5AI score0.00084EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/08/08 4:15 p.m.13 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp parameter within the /QueryView.php...

5CVSS7.5AI score0.00084EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/08/08 4:15 p.m.18 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the /QueryView.php...

5CVSS7.5AI score0.00084EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/08/08 4:15 p.m.19 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role and gender parameters within the /QueryView.php component...

5CVSS7.6AI score0.0008EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/08/08 4:15 p.m.14 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the 'value' and 'custom' parameters within the /QueryView.php...

5CVSS7.5AI score0.00084EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/08/08 4:15 p.m.15 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

5CVSS7.5AI score0.00084EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/08/08 4:15 p.m.9 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView.php...

5CVSS7.5AI score0.00084EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/08/08 4:15 p.m.17 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php...

5CVSS7.5AI score0.00084EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/08/08 4:15 p.m.14 views

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parameters within the /QueryView.php...

5CVSS7.5AI score0.00084EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/08/08 12:0 a.m.14 views

CVE-2023-38768

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php...

7.8AI score0.00084EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/08/08 12:0 a.m.17 views

CVE-2023-38769

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the /QueryView.php...

7.8AI score0.00084EPSS
Exploits0References4
Rows per page
Query Builder