391 matches found
CVE-2025-11938
ChurchCRM up to version 5.18.0 is affected by a deserialization vulnerability in the file setup/routes/setup.php. The issue arises when user-controlled values for DB_PASSWORD, ROOT_PATH, or URL are deserialized, enabling remote exploitation. Multiple connected reports consolidate this as a remote...
CVE-2025-11938
A vulnerability was found in ChurchCRM up to 5.18.0. This vulnerability affects unknown code of the file setup/routes/setup.php. Performing a manipulation of the argument DBPASSWORD/ROOTPATH/URL results in deserialization. The attack may be initiated remotely. The attack's complexity is rated as...
ChurchCRM code-related vulnerabilities
ChurchCRM is ChurchCRM open source an open source CRM system for churches. ChurchCRM 5.18.0 and earlier versions exist deserialization vulnerability , the vulnerability stems from the file setup/routes/setup.php in the parameter DBPASSWORD/ROOTPATH/URL in the receipt of user-submitted serialized...
EUVD-2004-0701
Malware in sbrugna...
EUVD-2012-5579
Malware in sbrugna...
EUVD-2007-0592
Malware in sbrugna...
EUVD-2014-0250
Malware in sbrugna...
EUVD-2001-1239
Malware in sbrugna...
EUVD-2006-1772
Malware in sbrugna...
EUVD-2003-0493
Malware in sbrugna...
EUVD-2003-0013
Malware in sbrugna...
EUVD-2008-5304
Malware in sbrugna...
EUVD-2013-2504
Malware in sbrugna...
EUVD-2010-2077
Malware in sbrugna...
EUVD-2018-11706
Malware in sbrugna...
EUVD-2013-3921
Malware in sbrugna...
EUVD-2007-5153
Malware in sbrugna...
EUVD-2021-18692
Malware in sbrugna...