{ "id": "CVE-2024-25893", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-21T18:15:51.580", "lastModified": "2024-02-22T19:07:27.197", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter." }, { "lang": "es", "value": "ChurchCRM 5.5.0 FRCertificates.php es vulnerable a la inyecci\u00f3n ciega de SQL (basada en el tiempo) a trav\u00e9s del par\u00e1metro GET CurrentFundraiser." } ], "metrics": {}, "references": [ { "url": "https://github.com/ChurchCRM/CRM/issues/6856", "source": "cve@mitre.org" } ] }