Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-105847. PoCs published by nu11secur1ty.
AI-analyzed exploit summary The exploit demonstrates a SQL injection vulnerability in ChurchCRM v4.5.3-121fcc1 via the `EID` parameter, allowing boolean-based blind, time-based blind, and UNION-based attacks without authentication. The payloads include techniques to exfiltrate data and execute arbitrary SQL queries.
Description
ChurchCRM v4.5.3-121fcc1 - SQL Injection
Exploits (1)
The exploit demonstrates a SQL injection vulnerability in ChurchCRM v4.5.3-121fcc1 via the `EID` parameter, allowing boolean-based blind, time-based blind, and UNION-based attacks without authentication. The payloads include techniques to exfiltrate data and execute arbitrary SQL queries.