2024-02-21 19:00:28 +00:00
{
"id" : "CVE-2024-25891" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-02-21T18:15:51.493" ,
2024-02-22 21:00:33 +00:00
"lastModified" : "2024-02-22T19:07:27.197" ,
"vulnStatus" : "Awaiting Analysis" ,
2024-02-21 19:00:28 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter."
2024-02-22 21:00:33 +00:00
} ,
{
"lang" : "es" ,
"value" : "ChurchCRM 5.5.0 FRBidSheets.php es vulnerable a la inyecci\u00f3n ciega de SQL (basada en el tiempo) a trav\u00e9s del par\u00e1metro GET CurrentFundraiser."
2024-02-21 19:00:28 +00:00
}
] ,
"metrics" : { } ,
"references" : [
{
"url" : "https://github.com/ChurchCRM/CRM/issues/6856" ,
"source" : "cve@mitre.org"
}
]
}