exploitDog

CVE-2024-25897

Опубликовано: 21 фев. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.

Ссылки

https://github.com/ChurchCRM/CRM/issues/6856
Exploit
Issue Tracking
Vendor Advisory
https://github.com/ChurchCRM/CRM/issues/6856
Exploit
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:churchcrm:churchcrm:5.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.0892

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-84vv-q8q9-r9j3

CVSS3: 9.8

github

почти 2 года назад

ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.

EPSS

Процентиль: 92%

0.0892

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89