ChurchCRM versions 4.5.3 and below suffer from a remote SQL injection vulnerability. Continue reading...