ChurchCRM SQL注入漏洞

ChurchCRM, a CRM system for churches, has a SQL injection vulnerability in ChurchCRM version 4.4.5, which originates from a security issue in the "PersonID" field of /churchcrm/WhyCameEditor.php. An attacker could use this vulnerability to perform sql injection and steal data...