https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 18:31:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-05362 cnvd-2026-05362 https://cve.radiocsirt.org/vuln/cnvd-2026-05362 https://cve.radiocsirt.org/vuln/euvd-2026-262281 EUVD-2026-262281 https://cve.radiocsirt.org/vuln/euvd-2026-262281 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66313 <p>ChurchCRM is an open-source church management system. In ChurchCRM 6.2.0 and earlier, there is a time-based blind SQL injection in the handling of the 1FieldSec parameter. Injecting SLEEP() causes deterministic server-side delays, proving the value is incorporated into a SQL query without proper parameterization. The issue allows data exfiltration and modification via blind techniques.</p> <p>ChurchCRM is an open-source church management system. In ChurchCRM 6.2.0 and earlier, there is a time-based blind SQL injection in the handling of the 1FieldSec parameter. Injecting SLEEP() causes deterministic server-side delays, proving the value is incorporated into a SQL query without proper parameterization. The issue allows data exfiltration and modification via blind techniques.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-66313