Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-53438
9.8
CRITICALCVSS v3
Published
November 22, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
EventAttendance.php in ChurchCRM 5.7.0 is vulnerable to SQL injection. An attacker can exploit this vulnerability by manipulating the 'Event' parameter, which is directly interpolated into the SQL query without proper sanitization or validation, allowing attackers to execute arbitrary SQL commands.
ChurchCRM/CRM
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.NVD