Main
Vulnerability Database
Exploits
ID:12585 - Exploit for Observable Response Discrepancy in ChurchCRM
ID:12585 - Exploit for Observable Response Discrepancy in ChurchCRM
Published: April 13, 2026
Vulnerability identifier: #VU125846
Vulnerability risk: Medium
CVE-ID: N/A
CWE-ID: CWE-204
Exploitation vector: Remote access
Vulnerable software:
ChurchCRM
ChurchCRM
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to differential response in Public Login API. A remote attacker can gain unauthorized access to sensitive information on the system.
Remediation
Install updates from vendor's website.