Phili67 vulnerabilities
We track 2 vulnerabilities in Phili67 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 13, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Phili67 vulnerabilities
- 8.7 High severity
ecclesiacrm: Improper Neutralization of Special Elements used in an SQL Command
EcclesiaCRM is CRM Software for church management. In 8.0.0 and earlier, the ValidateInput() function's default case in EcclesiaCRM's query view passes user-supplied POST parameters directly into SQL queries via str_replace without any sanitization, enabling S
- 9.8 Critical severity
ecclesiacrm: Improper Neutralization of Special Elements used in an SQL Command
EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. This vulnerability is fixed in 8.0.0.