ChurchCRM version 4.5.4 suffers from a remote authenticated blind SQL injection vulnerability. Continue reading...