Lucene search
+L

4 matches found

CNVD
CNVD
•added 2025/07/25 12:00 a.m.•20 views

Church Donation System offering.php File SQL Injection Vulnerability

The Church Donation System is a system of church giving. The Church Donation System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter trcode in the file /members/offering.php. An attacker can exploit this...

9.8CVSS8.3AI score0.00464EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/07/19 3:14 p.m.•34 views

CVE-2025-7832 code-projects Church Donation System offering.php sql injection

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/offering.php. The manipulation of the argument trcode leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS0.00464EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/19 3:14 p.m.•48 views

CVE-2025-7832

CVE-2025-7832 involves a SQL injection in Church Donation System 1.0, affecting the code path in /members/offering.php where the trcode parameter is used in SQL queries. The vulnerability arises from unsanitized/trusted input being incorporated into queries, enabling an attacker to execute arbitr...

9.8CVSS7AI score0.00464EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/19 12:00 a.m.•7 views

CVE-2025-7832: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/offering.php. The manipulation of the argument trcode leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.5AI score0.00464EPSS
SaveExploits1References1
Rows per page
Query Builder