EDB-52152

PoC

ChurchCRM 5.9.1 - SQL Injection

view exploit source exploit_dbtype webappsauthor Sanan Qasimzadapublished 2025-04-09catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-39304UShigh8.8Exploit
ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an improper sanitization of…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan