CVE-2023-38767

Summary

CVE-2023-38767 is a newly discovered SQL injection vulnerability affecting ChurchCRM version 5.0.0. Attackers can exploit this flaw by manipulating the 'value' and 'custom' parameters present in the /QueryView.php file. Successful exploitation grants an unauthorized user access to sensitive information, posing a significant risk to data confidentiality.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.