CVE-2005-2473: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to 1 PersonView.php, 2 MemberRoleChange.php, 3 PropertyAssign.php, 4 WhyCameEditor.php, 5 GroupPropsEditor.php, 6 Reports/PDFLabel.php, or 7 UserDelete.php, 8...

ChurchInfo Multiple Vulnerabilities

---------------------------------- ChurchInfo Multiple Vulnerabilities ---------------------------------- ChurchInfo is affected by mutliple path disclosures and sql injections. Vulnerabilties -------------- 1 The "PersonID" parameter on the following pages are vulnerable to sql injection and pat...