CVE-2025-7931: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Church Donation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /members/adminpic.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. T...

CVE-2025-7929: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /members/editMembers.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-7928: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Church Donation System 1.0 and classified as critical. This issue affects some unknown processing of the file /members/edituser.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-7930: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /members/addmembers.php. The manipulation of the argument mobile leads to sql injection. The attack can be launched...

CVE-2025-7860

A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of the file /members/loginadmin.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. Th...

CVE-2025-7861

A vulnerability, which was classified as critical, was found in code-projects Church Donation System 1.0. Affected is an unknown function of the file /members/search.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2025-7861

A vulnerability, which was classified as critical, was found in code-projects Church Donation System 1.0. Affected is an unknown function of the file /members/search.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2025-7860

A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of the file /members/loginadmin.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. Th...

CVE-2025-7859

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/updatepasswordadmin.php. The manipulation of the argument newpassword leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-7859

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/updatepasswordadmin.php. The manipulation of the argument newpassword leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-7861 code-projects Church Donation System search.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Church Donation System 1.0. Affected is an unknown function of the file /members/search.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2025-7861 code-projects Church Donation System search.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Church Donation System 1.0. Affected is an unknown function of the file /members/search.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2025-7861

Summary of CVE-2025-7861 (Church Donation System 1.0) : The vulnerability affects the Church Donation System in the file /members/search.php where the Username parameter is vulnerable to SQL injection. An attacker can remotely exploit this, with public exploit disclosure cited in multiple sources...

CVE-2025-7860

CVE-2025-7860 affects code-projects Church Donation System 1.0. The vulnerability is in the login_admin.php handling of the Username parameter, where lack of input validation enables SQL injection. Several connected sources confirm a remote, exploitable flow with the exploit disclosed publicly. T...

CVE-2025-7860 code-projects Church Donation System login_admin.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of the file /members/loginadmin.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. Th...

CVE-2025-7860 code-projects Church Donation System login_admin.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of the file /members/loginadmin.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. Th...

CVE-2025-7859

The CVE-2025-7859 entry concerns code-projects Church Donation System 1.0. A SQL injection vulnerability exists in the file /members/update_password_admin.php triggered by manipulating the new_password parameter. The vulnerability is exploitable remotely, and exploits have been disclosed publicly...

CVE-2025-7859 code-projects Church Donation System update_password_admin.php sql injection

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/updatepasswordadmin.php. The manipulation of the argument newpassword leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-7859 code-projects Church Donation System update_password_admin.php sql injection

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/updatepasswordadmin.php. The manipulation of the argument newpassword leads to sql injection. The attack can be initiated remotely. The exploi...

Code-Projects Church Donation System 注入漏洞

The Church Donation System is a system of church giving. The Church Donation System suffers from a SQL injection vulnerability that stems from the lack of validation of the parameter Username in the file /members/search.php for externally entered SQL statements. An attacker can exploit this...