cpe:2.3:a:church_management_system_project:church_management_system:1.0:*:*:*:*:*:*:*
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.
Max CVSS
7.2
EPSS Score
0.07%
Published
2022-11-30
Updated
2022-12-01
An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Max CVSS
7.2
EPSS Score
0.11%
Published
2022-10-12
Updated
2022-10-13
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-09-12
Updated
2022-09-15
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-09-15
Updated
2022-09-16
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php.
Max CVSS
7.2
EPSS Score
0.09%
Published
2022-09-15
Updated
2022-09-16
A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR (SELECT 7064 FROM(SELECT COUNT(*),CONCAT(0x71627a7671,(SELECT (ELT(7064=7064,1))),0x716b707871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- jURL leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205668.
Max CVSS
8.8
EPSS Score
0.10%
Published
2022-08-05
Updated
2022-08-10
Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the /uploads directory. This can lead to RCE on the web server by uploading a PHP webshell.
Max CVSS
9.8
EPSS Score
0.28%
Published
2022-06-13
Updated
2022-06-27
Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field.
Max CVSS
9.8
EPSS Score
1.58%
Published
2021-10-29
Updated
2021-11-02
8 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!