PT-2023-26600 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.0.0 Description: The issue allows a remote attacker to obtain sensitive information via the volopp parameter within the "/QueryView.php" API endpoint. This enables the attacker to inject SQL code, potentially leading to...