CVE-2020-28848

Description

CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file.

Related CPE's

achurchcrmchurchcrm4.2.0*******

References

https://github.com/ChurchCRM/CRM/issues/5465

ExploitIssue Tracking

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io