CVE-2021-43258

CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requires authenticated access tot he ChurchInfo application. Once authenticated, a user can add names to their cart, and compose an email. Uploading an attachment for the email stores the attachment on the site in the /tmp_attach/ folder where it can be accessed with a GET request. There are no limitations on files that can be attached, allowing for malicious PHP code to be uploaded and interpreted by the server.

• CWE-434
• CWE-434

• http://www.churchdb.org/Product
• https://github.com/rapid7/metasploit-framework/pull/17257Exploit, Patch, Third Party Advisory
• https://sourceforge.net/projects/churchinfo/files/Product
• http://www.churchdb.org/Product
• https://github.com/rapid7/metasploit-framework/pull/17257Exploit, Patch, Third Party Advisory
• https://sourceforge.net/projects/churchinfo/files/Product

Published

Nov 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43247Windows TCP/IP Driver Elevation of Privilege Vulnerability7.8
• CVE-2021-43248Windows Digital Media Receiver Elevation of Privilege Vulner…7.8
• CVE-2021-4325A vulnerability, which was classified as problematic, has be…6.1
• CVE-2021-43255Microsoft Office Trust Center Spoofing Vulnerability5.5
• CVE-2021-43256Microsoft Excel Remote Code Execution Vulnerability7.8
• CVE-2021-43257Lack of Neutralization of Formula Elements in the CSV API of…7.8
• CVE-2021-4326A vulnerability in Imperative framework which allows already…7.8
• CVE-2021-43264In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adj…3.3
• CVE-2021-43265In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, cer…5.4
• CVE-2021-43266In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exp…7.3
• CVE-2021-43267An issue was discovered in net/tipc/crypto.c in the Linux ke…9.8
• CVE-2021-43268An issue was discovered in VxWorks 6.9 through 7. In the IKE…6.5