Church Donation System offering.php File SQL Injection Vulnerability

The Church Donation System is a system of church giving. The Church Donation System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter trcode in the file /members/offering.php. An attacker can exploit this...

CVE-2025-7832 code-projects Church Donation System offering.php sql injection

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/offering.php. The manipulation of the argument trcode leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-7832

CVE-2025-7832 involves a SQL injection in Church Donation System 1.0, affecting the code path in /members/offering.php where the trcode parameter is used in SQL queries. The vulnerability arises from unsanitized/trusted input being incorporated into queries, enabling an attacker to execute arbitr...