TI-2018-15401 CVE-2018-25176 · GHSA-c4q4-g662-jr44
Alive Parish 2.0.4 SQL Injection and Arbitrary File Upload
Priority HIGH 77
Alive Parish 2.0.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the key parameter in the search endpoint.