https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:21:35.748592+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281157 EUVD-2026-281157 2026-10-17T12:21:35.751359+00:00 EUVD-2026-281157 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39343 fkie_cve-2026-39343 2026-10-17T12:21:35.751405+00:00

ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in the EditEventTypes.php file, which is only accessible to administrators. The EN_tyid POST parameter is not sanitized before being used in a SQL query, allowing an administrator to execute arbitrary SQL commands directly against the database. This vulnerability is fixed in 7.1.0.