Sql injection

ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...

Sql injection

ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...

CVE-2024-25894

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...

CVE-2024-25894

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...

CVE-2024-25892

The open-source CRM system ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) . The root cause is the improper neutralization of special elements used in an SQL command within the ConfirmReport.php page, specifically via the familyId GET parameter. Exploitation of this vu...

CVE-2024-25892

ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection Time-based via the familyId GET parameter...

PT-2024-21186

Name of the Vulnerable Software and Affected Versions ChurchCRM version 5.5.0 Description The issue concerns a Blind SQL Injection vulnerability, specifically time-based, in the FRCertificates.php file. This vulnerability can be exploited via the CurrentFundraiser GET parameter. Recommendations F...

CVE-2024-25896

ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...

CVE-2024-25896

ChurchCRM version 5.5.0 is vulnerable to a Time-based Blind SQL Injection vulnerability located in the EventEditor.php file. The root cause is the improper neutralization of special elements used in an SQL command via the EID POST parameter. This flaw can be exploited to gain unauthorized access ...

CVE-2024-25896

ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...

CVE-2024-25893

ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...

ChurchCRM Security Breach

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 5.5.0, which stems from a time-based SQL blind injection vulnerability in the EventCount POST parameter of the EventEditor.php page...

ChurchCRM Security Breach

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 5.5.0, which stems from a time-based SQL blind injection vulnerability in the CurrentFundraiser GET parameter of the FRBidSheets.php page...

CVE-2024-25894

ChurchCRM version 5.5.0 is vulnerable to a Blind SQL Injection (Time-based) flaw located in the /EventEditor.php page. The vulnerability is triggered via the EventCount POST parameter , allowing an attacker to execute arbitrary SQL commands. Exploitation details and specific remediation steps are...

PT-2024-21184 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.5.0 Description: The issue concerns a Blind SQL Injection vulnerability, specifically time-based, that can be exploited via the CurrentFundraiser GET parameter in the FRBidSheets.php file. Recommendations: For ChurchCRM...

CVE-2024-25896

ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...

ChurchCRM Security Breach

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 5.5.0, which stems from a time-based SQL blind injection vulnerability in the EID POST parameter of the EventEditor.php page...

PT-2024-21185

Name of the Vulnerable Software and Affected Versions ChurchCRM version 5.5.0 Description The issue concerns a Blind SQL Injection vulnerability, specifically a time-based attack, that can be exploited via the familyId GET parameter in the ConfirmReport.php file. This allows an attacker to...

CVE-2024-25894: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EventCount POST parameter...

CVE-2024-25897: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...