CVE-2021-3164
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via…
Published: 2021-01-21 · CVSS: Unscored
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7