PT-2025-12936
CVE-2025-26941
·
Published
2025-03-13
·
Updated
2025-03-26
Description by
CVSS 3.1
9.3
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Andy Moyle Church Admin versions n/a through 5.0.18
Description
The issue affects Andy Moyle Church Admin, allowing SQL Injection due to improper neutralization of special elements used in an SQL command. This can lead to unauthorized access and manipulation of database content.
Recommendations
For versions n/a through 5.0.18, update to a version later than 5.0.18 to resolve the SQL Injection issue.
As a temporary workaround, consider restricting access to sensitive database elements until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾