CVE-2026-36358

CVE-2026-36358 PoC - Juzaweb CMS v.5.0.0 （XSS） Per prima cosa, configura la piattaforma normalmente e registra un account. Qui, l'account amministratore che ho registrato è [email protected] / 123456. Dopo aver configurato la piattaforma, puoi vedere la homepage del sito web. Accedi a /admin...

CVE-2024-33308

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

CVE-2023-51254

Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component...

Sql injection

SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter...

CVE-2024-24375

SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter...

CVE-2024-24375

SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter...

CVE-2023-38773

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parameters within the /QueryView.php...

CVE-2023-38769

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the /QueryView.php...

CVE-2023-38765

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php...

CVE-2023-38762

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView.php...

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView.php...

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the /QueryView.php...

CVE-2023-38763

CVE-2023-38763 is a SQL injection vulnerability affecting ChurchCRM v5.0.0. The issue allows a remote attacker to obtain sensitive information through the FundRaiserID parameter in the /FundRaiserEditor.php endpoint. The vulnerability is documented across multiple sources (NVD/Red Hat/OSV/others)...

CVE-2023-38764

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

CVE-2023-38765

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php...

CVE-2023-38760

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role and gender parameters within the /QueryView.php component...

CVE-2023-38768

CVE-2023-38768 describes a SQL injection in ChurchCRM v5.0.0, where the vulnerability is exploitable via the PropertyID parameter in /QueryView.php. The connected documents confirm this classic information disclosure vulnerability without detailing exploit access or availability of a patch. Impac...

CVE-2023-38767

ChurchCRM v5.0.0 is affected by an SQL injection in /QueryView.php, exploitable via the value and custom parameters. Root cause: unsafely constructed SQL queries in that endpoint allow remote disclosure of sensitive information. Exploitation in the wild is not documented in the provided sources; ...

CVE-2023-38771

ChurchCRM v5.0.0 is affected by an SQL injection via the volopp parameter in /QueryView.php. Root cause: improper handling of user input in that endpoint leads to database query manipulation. Impact per the records includes exposure of sensitive information to remote attackers; exploitation detai...