Ecclesia Crm
Approved changes feed: RSS · Atom
cpe:2.3:a:phili67:ecclesia_crm:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Phili67 (101d744f-bd32-5c62-93dd-4e001760073f) |
|---|---|
| Product | Ecclesia Crm (ad2c9fc6-392b-514e-b493-189706641028) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6628 |
vulnerable | 2026-06-08 08:07:04.952340 |
phili67 Ecclesia CRM Query Viewer view ValidateInput sql injection
MEDIUM (6.3)
A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput of the file /v2/query/view/ of the component Query Viewer Component. This manipulation of the argument custom causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-20T10:00:16.739Z
Updated: 2026-04-20T10:54:35.730Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.