SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote malicious user to obtain sensitive information via the FundRaiserID parameter within the /FundRaiserEditor.php endpoint.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
churchcrm churchcrm 5.0.0 |