Phili67

3 CVEs in 2 Phili67 products, including Ecclesiacrm, Ecclesia Crm. Newest: CVE-2026-44418 (2026-05-13). Severity, EPSS and public exploits for each.

Phili67 products with known CVEs

ProductCVEs
Ecclesiacrm2
Ecclesia Crm1
Phili67 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-444182026-05-13EcclesiaCRM is CRM Software for church management. In 8.0.0 and earlier, the ValidateInput() function's default case in EcclesiaCRM's query view passes user-su…
CVE-2026-6628Medium6.32026-04-20A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput of the file /v2/query/view/ of the component Query Viewer Co…
CVE-2026-35184Critical9.82026-04-06EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom an…