Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/04/07 11:1 p.m.1 views

CVE-2026-35184

EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. This vulnerability is fixed in 8.0.0...

9.8CVSS5.9AI score0.00035EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/06 7:21 p.m.12 views

CVE-2026-35184 EcclesiaCRM has a Critical SQL Injection

EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. This vulnerability is fixed in 8.0.0...

8.7CVSS0.00035EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.6 views

EcclesiaCRM SQL注入漏洞

EcclesiaCRM is a customer relationship management software for church management, developed by the French individual phili67. Versions of EcclesiaCRM prior to 8.0.0 contained a SQL injection vulnerability. This vulnerability stemmed from improper handling of the custom and value parameters in the...

9.8CVSS5.9AI score0.00035EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2022/07/05 8:15 p.m.0 views

CVE-2022-34972

So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the attvalueid , manuvalueid , optvalueid , and subcatevalueid parameters at /index.php?route=extension/module/sofiltershopby/filterdata...

9.8CVSS6AI score0.00307EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/29 11:15 p.m.1 views

CVE-2022-24124

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations...

7.5CVSS5.7AI score0.59993EPSS
Exploits9References6
CNVD
CNVD
added 2018/04/27 12:0 a.m.2 views

SmartMesh smart contract 'transferProxy' function integer overflow vulnerability

SmartMesh is a blockchain-based underlying protocol for the Internet of Things IoT, targeting areas such as meshless communication and meshless payment. smart contract is one of the smart contracts. An integer overflow vulnerability exists in the 'transferProxy' function of the smart contract...

7.5CVSS7.1AI score0.00267EPSS
Exploits2References1
Exploit DB
Exploit DB
added 2003/03/15 12:0 a.m.25 views

Sun JDK/SDK 1.3/1.4 / IBM JDK 1.3.1 / BEA Systems WebLogic 5/6/7 - java.util.zip Null Value Denial of Service (1)

source: https://www.securityfocus.com/bid/7109/info Several implementations of the Java Virtual Machine have been reported to be prone to a denial of service condition. This vulnerability occurs in several methods in the java.util.zip class. The methods can be called with certain types of...

7.4AI score
Exploits0
Rows per page
Query Builder