| |
Vulnerability CVE-2021-41661
Published: 2022-06-13 Modified: 2022-06-14
| Description: |
Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the /uploads directory. This can lead to RCE on the web server by uploading a PHP webshell. |
References: |
https://github.com/janikwehrli1/0dayHunt/blob/main/Church_Managementv1.0_RCE.py
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
