27 matches found
CVE-2005-2474
ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to 1 PersonView.php, 2 MemberRoleChange.php, 3 PropertyAssign.php, 4 WhyCameEditor.php, 5 GroupPropsEditor.php, 6 Reports/PDFLabel.php, or 7 UserDelete.php, an invalid Number parameter to 8...
CVE-2005-2473
The CVE-2005-2473 entry concerns ChurchInfo and documents multiple SQL injection vulnerabilities in which an attacker can cause remote execution of arbitrary SQL via the PersonID parameter to several PHP scripts (PersonView.php, MemberRoleChange.php, PropertyAssign.php, WhyCameEditor.php, GroupPr...
CVE-2005-2473
Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to 1 PersonView.php, 2 MemberRoleChange.php, 3 PropertyAssign.php, 4 WhyCameEditor.php, 5 GroupPropsEditor.php, 6 Reports/PDFLabel.php, or 7 UserDelete.php, 8...
CVE-2005-2474
ChurchInfo is affected by CVE-2005-2474, where remote attackers can cause information disclosure by supplying various parameters (PersonID, GroupID, PropertyID, FamilyID, PledgeID, etc.) to multiple PHP scripts (e.g., PersonView.php, MemberRoleChange.php, PropertyAssign.php, WhyCameEditor.php, Gr...
CVE-2005-2474
ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to 1 PersonView.php, 2 MemberRoleChange.php, 3 PropertyAssign.php, 4 WhyCameEditor.php, 5 GroupPropsEditor.php, 6 Reports/PDFLabel.php, or 7 UserDelete.php, an invalid Number parameter to 8...
CVE-2005-2473
Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to 1 PersonView.php, 2 MemberRoleChange.php, 3 PropertyAssign.php, 4 WhyCameEditor.php, 5 GroupPropsEditor.php, 6 Reports/PDFLabel.php, or 7 UserDelete.php, 8...
ChurchInfo Multiple Vulnerabilities
---------------------------------- ChurchInfo Multiple Vulnerabilities ---------------------------------- ChurchInfo is affected by mutliple path disclosures and sql injections. Vulnerabilties -------------- 1 The "PersonID" parameter on the following pages are vulnerable to sql injection and pat...