PT-2025-30139 · Unknown · Church Donation System

N0Name · Published 2025-07-19 · Updated 2025-07-24 · CVE-2025-7829

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Church Donation System version 1.0

Description A vulnerability exists in Church Donation System 1.0. The issue is a SQL injection affecting an unknown functionality of the file /login.php. Manipulation of the Username argument can lead to successful exploitation, and the attack can be launched remotely. The exploit has been disclosed to the public.

Recommendations For Church Donation System version 1.0, sanitize the Username input to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the /login.php file until a more permanent solution is implemented.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-7829

Affected Products

Church Donation System

References · 12

• 🔥 https://github.com/n0name-yang/myCVE/issues/5 · Exploit
• https://osv.dev/vulnerability/CVE-2025-7829 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7829 · Security Note
• https://twitter.com/VulmonFeeds/status/1946590479010664457 · Twitter Post
• https://vuldb.com/?id.316933 · Note
• https://vuldb.com/?ctiid.316933 · Note
• https://twitter.com/cracbot/status/1948337420409422313 · Twitter Post
• https://code-projects.org · Note
• https://vuldb.com/?submit.616884 · Note
• https://t.me/cvenotify/129553 · Telegram Post
• https://twitter.com/CVEnew/status/1946569556790768060 · Twitter Post
• https://t.me/cvetracker/28216 · Telegram Post