| शीर्षक | https://github.com/phili67/ecclesiacrm Ecclesia CRM < 8.0.0 SQL Injection |
|---|
| विवरण | A critical SQL injection vulnerability was discovered in EcclesiaCRM v8.0.0 within the Query Viewer component. The flaw exists in the /v2/query/view/{id} endpoint, specifically inside the ValidateInput and ProcessSQL functions located in src/v2/templates/query/queryview.php. The application fails to properly neutralize special elements in SQL commands, allowing authenticated users to inject malicious payloads into query parameters such as custom or value. Because the software utilizes insecure string substitution via str_replace to build database queries instead of prepared statements, an attacker can execute arbitrary SQL commands to exfiltrate sensitive data, including administrative usernames, password hashes, and personal member records. Furthermore, the application exacerbates the risk by leaking the full constructed SQL query within HTML comments, providing attackers with the necessary technical details to refine their injection strings and confirm successful exploitation. |
|---|
| स्रोत | ⚠️ https://github.com/NicolasPauferro/studiessqli |
|---|
| उपयोगकर्ता | Nicolas Pauferro (UID 96903) |
|---|
| सबमिशन | 30/03/2026 03:21 AM (6 महीनों पहले) |
|---|
| संयम | 19/04/2026 06:46 PM (21 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 358262 [phili67 Ecclesia CRM तक 8.0.0 Query Viewer /v2/query/view/ ValidateInput custom SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|