Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, (8) DepositSlipID parameter to DepositSlipEditor.php, (9) QueryID parameter to QueryView.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php.
Version | Base score | Base severity | Vector |
---|
Hyperlink | Resource Type |
---|
Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, (8) DepositSlipID parameter to DepositSlipEditor.php, (9) QueryID parameter to QueryView.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php.
Type | CWE ID | Description |
---|---|---|
text | N/A | n/a |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
Hyperlink | Resource |
---|---|
http://www.osvdb.org/18416 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18411 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18423 | vdb-entry x_refsource_OSVDB x_transferred |
http://marc.info/?l=bugtraq&m=112291550713546&w=2 | mailing-list x_refsource_BUGTRAQ x_transferred |
http://www.osvdb.org/18421 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18418 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18413 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.securityfocus.com/bid/14438 | vdb-entry x_refsource_BID x_transferred |
http://www.osvdb.org/18417 | vdb-entry x_refsource_OSVDB x_transferred |
http://securitytracker.com/id?1014617 | vdb-entry x_refsource_SECTRACK x_transferred |
http://www.osvdb.org/18420 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18415 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18428 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18414 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18427 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18422 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18410 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18412 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18408 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18424 | vdb-entry x_refsource_OSVDB x_transferred |
http://www.osvdb.org/18409 | vdb-entry x_refsource_OSVDB x_transferred |
https://exchange.xforce.ibmcloud.com/vulnerabilities/21647 | vdb-entry x_refsource_XF x_transferred |
http://www.osvdb.org/18419 | vdb-entry x_refsource_OSVDB x_transferred |
http://secunia.com/advisories/16292 | third-party-advisory x_refsource_SECUNIA x_transferred |
Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, (8) DepositSlipID parameter to DepositSlipEditor.php, (9) QueryID parameter to QueryView.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php.
Date Added | Due Date | Vulnerability Name | Required Action |
---|---|---|---|
N/A |
Type | Version | Base score | Base severity | Vector |
---|---|---|---|---|
Primary | 2.0 | 7.5 | HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
CWE ID | Type | Source |
---|---|---|
NVD-CWE-Other | Primary | nvd@nist.gov |