Approved changes feed: RSS · Atom
cpe:2.3:a:churchcrm:churchcrm:5.0.0:*:*:*:*:*:*:*
part: a version: 5.0.0 update: *
| Vendor | Churchcrm (b23fd32c-1a6f-56dc-b48d-9ceb245e8d86) |
|---|---|
| Product | Churchcrm (839aefb7-6311-5a6d-8b0e-980005b7e99b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/churchcrm/crm |
purl2cpe | 2026-06-01 10:17:46.631644 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38773 |
vulnerable | 2026-06-08 06:08:18.841095 |
Details available
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parameters within the /QueryView.php.
Published: 2023-08-08T00:00:00.000Z
Updated: 2024-10-10T20:03:47.292Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38771 |
vulnerable | 2026-06-08 06:08:18.840754 |
Details available
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp parameter within the /QueryView.php.
Published: 2023-08-08T00:00:00.000Z
Updated: 2024-10-10T18:52:43.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38770 |
vulnerable | 2026-06-08 06:08:18.840396 |
Details available
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group parameter within the /QueryView.php.
Published: 2023-08-08T00:00:00.000Z
Updated: 2024-10-15T18:14:07.719Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38769 |
vulnerable | 2026-06-08 06:08:18.839923 |
Details available
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the /QueryView.php.
Published: 2023-08-08T00:00:00.000Z
Updated: 2024-10-10T18:23:10.506Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38768 |
vulnerable | 2026-06-08 06:08:18.839565 |
Details available
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php.
Published: 2023-08-08T00:00:00.000Z
Updated: 2024-10-10T18:23:52.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38767 |
vulnerable | 2026-06-08 06:08:18.839189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38766 |
vulnerable | 2026-06-08 06:08:18.838875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38765 |
vulnerable | 2026-06-08 06:08:18.838474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38764 |
vulnerable | 2026-06-08 06:08:18.838160 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38763 |
vulnerable | 2026-06-08 06:08:18.837671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38762 |
vulnerable | 2026-06-08 06:08:18.837362 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38761 |
vulnerable | 2026-06-08 06:08:18.837022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38760 |
vulnerable | 2026-06-08 06:08:18.836606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.