Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
crm-now GmbH records in CISA KEVNo crm-now GmbH vulnerabilities are listed in CISA KEV.
Priority HIGH 70
berliCRM 1.0.24 contains a SQL injection vulnerability in the 'src_record' parameter that allows remote attackers to manipulate database queries.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00324 · Published 2026-01-29 · No fix listed CWE-89
Open these records in search →