{"type": "osvdb", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18418", "hashmap": [{"key": "affectedSoftware", "hash": "7a96841b56bc701af4bda14f591f6b5f"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "fd47caf54a56634ac70254e1641a1840"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "e49a99f32af12d5bb3bb43ab9082ae16"}, {"key": "href", "hash": "ddaefe860703949d771fc2c84548c085"}, {"key": "modified", "hash": "11a476d7a9ce820cfdb519fa4260b0f4"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "11a476d7a9ce820cfdb519fa4260b0f4"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "827515c025d0dfca3799c3d503e132ef"}, {"key": "title", "hash": "e8917cf6eb4d287981d37e769f41e252"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}], "bulletinFamily": "software", "cvss": {"vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/", "score": 7.5}, "viewCount": 0, "history": [], "edition": 1, "objectVersion": "1.2", "reporter": "thegreatone2176(thegreatone2176@yahoo.com)", "title": "ChurchInfo MemberRoleChange.php Multiple Variable SQL Injection", "affectedSoftware": [{"operator": "eq", "version": "1.2.2", "name": "ChurchInfo"}], "enchantments": {"score": {"vector": "NONE", "value": 7.5}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2005-2473"]}, {"type": "osvdb", "idList": ["OSVDB:18422", "OSVDB:18415", "OSVDB:18421", "OSVDB:18414", "OSVDB:18427", "OSVDB:18428", "OSVDB:18423", "OSVDB:18413", "OSVDB:18417", "OSVDB:18419"]}], "modified": "2017-04-28T13:20:14"}, "vulnersScore": 7.5}, "references": [], "id": "OSVDB:18418", "hash": "a38497190b6f53a4fa70ca6b05a30eaba6f4ffb999820d7376189431f8e1c1d4", "lastseen": "2017-04-28T13:20:14", "cvelist": ["CVE-2005-2473"], "modified": "2005-08-01T08:17:46", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the MemebrRoleChange.php script not properly sanitizing user-supplied input to the 'GroupID' and 'PersonID' variables. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the MemebrRoleChange.php script not properly sanitizing user-supplied input to the 'GroupID' and 'PersonID' variables. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n"}

{"cve": [{"lastseen": "2017-07-11T11:14:56", "bulletinFamily": "NVD", "description": "Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, (8) DepositSlipID parameter to DepositSlipEditor.php, (9) QueryID parameter to QueryView.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php.", "modified": "2017-07-10T21:32:52", "published": "2005-08-05T00:00:00", "id": "CVE-2005-2473", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-2473", "title": "CVE-2005-2473", "type": "cve", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "osvdb": [{"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the GroupMemberList.php script not properly sanitizing user-supplied input to the 'GroupID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the GroupMemberList.php script not properly sanitizing user-supplied input to the 'GroupID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18414", "id": "OSVDB:18414", "type": "osvdb", "title": "ChurchInfo GroupMemberList.php GroupID Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the GroupPropsEditor.php script not properly sanitizing user-supplied input to the 'PersonID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the GroupPropsEditor.php script not properly sanitizing user-supplied input to the 'PersonID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18415", "id": "OSVDB:18415", "type": "osvdb", "title": "ChurchInfo GroupPropsEditor.php PersonID Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the PledgeDetails.php script not properly sanitizing user-supplied input to the 'PledgeID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the PledgeDetails.php script not properly sanitizing user-supplied input to the 'PledgeID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18421", "id": "OSVDB:18421", "type": "osvdb", "title": "ChurchInfo PledgeDetails.php PledgeID Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the Canvas05Editor.php script not properly sanitizing user-supplied input to the 'FamilyID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the Canvas05Editor.php script not properly sanitizing user-supplied input to the 'FamilyID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18408", "id": "OSVDB:18408", "type": "osvdb", "title": "ChurchInfo Canvas05Editor.php FamilyID Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the PropertyAssign.php script not properly sanitizing user-supplied input to the 'PersonID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the PropertyAssign.php script not properly sanitizing user-supplied input to the 'PersonID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18422", "id": "OSVDB:18422", "type": "osvdb", "title": "ChurchInfo PropertyAssign.php PersonID Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the GroupReport.php script not properly sanitizing user-supplied input to the 'GroupID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the GroupReport.php script not properly sanitizing user-supplied input to the 'GroupID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18416", "id": "OSVDB:18416", "type": "osvdb", "title": "ChurchInfo GroupReport.php GroupID Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the PersonView.php script not properly sanitizing user-supplied input to the 'PersonID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the PersonView.php script not properly sanitizing user-supplied input to the 'PersonID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18420", "id": "OSVDB:18420", "type": "osvdb", "title": "ChurchInfo PersonView.php PersonID Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the QueryView.php script not properly sanitizing user-supplied input to the 'QueryID' and 'id' variables. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the QueryView.php script not properly sanitizing user-supplied input to the 'QueryID' and 'id' variables. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18424", "id": "OSVDB:18424", "type": "osvdb", "title": "ChurchInfo QueryView.php Multiple Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the FamilyView.php script not properly sanitizing user-supplied input to the 'FamilyID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the FamilyView.php script not properly sanitizing user-supplied input to the 'FamilyID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18411](https://vulners.com/osvdb/OSVDB:18411)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18412", "id": "OSVDB:18412", "type": "osvdb", "title": "ChurchInfo FamilyView.php FamilyID Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:14", "bulletinFamily": "software", "description": "## Vulnerability Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the DepositSlipEditor.php script not properly sanitizing user-supplied input to the 'DepositSlipID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## Solution Description\nUpgrade to version 1.2.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nChurchInfo contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the DepositSlipEditor.php script not properly sanitizing user-supplied input to the 'DepositSlipID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database.\n## References:\nVendor URL: http://www.churchdb.org/\n[Secunia Advisory ID:16292](https://secuniaresearch.flexerasoftware.com/advisories/16292/)\n[Related OSVDB ID: 18410](https://vulners.com/osvdb/OSVDB:18410)\n[Related OSVDB ID: 18422](https://vulners.com/osvdb/OSVDB:18422)\n[Related OSVDB ID: 18424](https://vulners.com/osvdb/OSVDB:18424)\n[Related OSVDB ID: 18408](https://vulners.com/osvdb/OSVDB:18408)\n[Related OSVDB ID: 18409](https://vulners.com/osvdb/OSVDB:18409)\n[Related OSVDB ID: 18412](https://vulners.com/osvdb/OSVDB:18412)\n[Related OSVDB ID: 18414](https://vulners.com/osvdb/OSVDB:18414)\n[Related OSVDB ID: 18417](https://vulners.com/osvdb/OSVDB:18417)\n[Related OSVDB ID: 18418](https://vulners.com/osvdb/OSVDB:18418)\n[Related OSVDB ID: 18419](https://vulners.com/osvdb/OSVDB:18419)\n[Related OSVDB ID: 18421](https://vulners.com/osvdb/OSVDB:18421)\n[Related OSVDB ID: 18425](https://vulners.com/osvdb/OSVDB:18425)\n[Related OSVDB ID: 18428](https://vulners.com/osvdb/OSVDB:18428)\n[Related OSVDB ID: 18429](https://vulners.com/osvdb/OSVDB:18429)\n[Related OSVDB ID: 18413](https://vulners.com/osvdb/OSVDB:18413)\n[Related OSVDB ID: 18420](https://vulners.com/osvdb/OSVDB:18420)\n[Related OSVDB ID: 18423](https://vulners.com/osvdb/OSVDB:18423)\n[Related OSVDB ID: 18415](https://vulners.com/osvdb/OSVDB:18415)\n[Related OSVDB ID: 18416](https://vulners.com/osvdb/OSVDB:18416)\n[Related OSVDB ID: 18426](https://vulners.com/osvdb/OSVDB:18426)\n[Related OSVDB ID: 18427](https://vulners.com/osvdb/OSVDB:18427)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0007.html\n[CVE-2005-2473](https://vulners.com/cve/CVE-2005-2473)\n", "modified": "2005-08-01T08:17:46", "published": "2005-08-01T08:17:46", "href": "https://vulners.com/osvdb/OSVDB:18411", "id": "OSVDB:18411", "type": "osvdb", "title": "ChurchInfo DepositSlipEditor.php DepositSlipID Variable SQL Injection", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}