WordPress plugin IDonate 信息泄露漏洞

WordPress IDonate plugin is a WordPress plugin designed for blood donation management, mainly used to create blood donation related website features. An unauthorized access vulnerability exists in WordPress IDonate plugin, which stems from the application's inadequate protection of sensitive...

CVE-2025-7205

The CVE-2025-7205 entry refers to a Stored Cross‑Site Scripting in the WordPress GiveWP – Donation Plugin and Fundraising Platform. Affected: GiveWP core (WordPress plugin) for versions up to and including 4.5.0, due to insufficient input sanitization and output escaping in the donor notes parame...

CVE-2025-8167

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editmembers.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launch...

CVE-2025-8166

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to...

CVE-2025-8167

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editmembers.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launch...

CVE-2025-8167

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editmembers.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launch...

CVE-2025-8167

CVE-2025-8167 affects Code-Projects Church Donation System 1.0. The vulnerability is an XSS in an unknown functionality of /admin/edit_members.php, triggered by manipulating the fname parameter. It can be exploited remotely over the network, and public disclosure has occurred. Multiple connected ...

CVE-2025-8167 code-projects Church Donation System edit_members.php cross site scripting

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editmembers.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launch...

CVE-2025-8167 code-projects Church Donation System edit_members.php cross site scripting

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editmembers.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launch...

CVE-2025-8166

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to...

CVE-2025-8166

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to...

CVE-2025-8166

CVE-2025-8166 affects code-projects Church Donation System 1.0. A SQL injection vulnerability exists in the HTTP POST Request Handler, specifically in /admin/index.php where manipulating the Username argument can be exploited remotely. The exploit has been disclosed publicly and may be used. Mult...

CVE-2025-8166 code-projects Church Donation System HTTP POST Request index.php sql injection

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to...

CVE-2025-8166 code-projects Church Donation System HTTP POST Request index.php sql injection

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to...

Church Donation System reg.php File SQL Injection Vulnerability

The Church Donation System is a system of church giving. Church Donation System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter mobile in the file /reg.php. An attacker can exploit this vulnerability to execut...

Code-Projects Church Donation System 安全漏洞

Code-Projects Church Donation System is an open source church donation system from Code-Projects. A security vulnerability exists in Code-Projects Church Donation System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /admin/index.php in the HTTP POST...

Church Donation System Tithes.php File SQL Injection Vulnerability

The Church Donation System is a system of church giving. The Church Donation System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter trcode in the file /members/Tithes.php. An attacker can exploit this...

Church Donation System update_password_admin.php File SQL Injection Vulnerability

The Church Donation System is a system of church giving. The Church Donation System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter newpassword in the file /members/updatepasswordadmin.php against an externally entered SQL statement. An...

Church Donation System giving.php File SQL Injection Vulnerability

The Church Donation System is a system of church giving. The Church Donation System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter Amount in the file /members/giving.php. An attacker can exploit this...

PT-2025-30932 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A vulnerability exists in Church Donation System version 1.0 related to cross site scripting. The issue is located in the /admin/edit members.php file. Manipulation of the fname argument can lea...