SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote malicious user to obtain sensitive information via the friendmonths parameter within the /QueryView.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
churchcrm churchcrm 5.0.0 |