Vulnerabilities (CVE)

Filtered by vendor Uiga Subscribe
Filtered by product Church Portal
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3116 1 Uiga 1 Church Portal 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action.
CVE-2009-3081 1 Uiga 1 Church Portal 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.