← All advisories

High severity7.2NVD Advisory· Published Jun 8, 2022· Updated Jun 17, 2026

CVE-2022-31325

CVE-2022-31325

Description

There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Churchcrm/Churchcrm3 versions
cpe:2.3:a:churchcrm:churchcrm:4.4.5:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:churchcrm:churchcrm:4.4.5:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =4.4.5

Patches

Vulnerability mechanics

References

4

packetstormsecurity.com/files/167483/ChurchCRM-4.4.5-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
github.com/ChurchCRM/CRM/issues/6005nvdIssue TrackingThird Party Advisory
github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325nvdThird Party Advisory
www.nu11secur1ty.com/2022/06/cve-2022-31325.htmnvdBroken Link

News mentions

0

No linked articles in our index yet.