Skip to content
OpenAdvisories

Vendor

phili67

3 known vulnerabilities.

Products

ecclesiacrm 2 Ecclesia CRM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-6628

    phili67 Ecclesia CRM Query Viewer view ValidateInput sql injection

    A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput of the file /v2/query/view/ of the component Query Viewer Component. This manipulation of the argument custom causes sql injection. The attack can be initiated …

    phili67 Ecclesia CRM