Church Management System Project

Church Management System

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2022-45328

Exploit
  • EPSS 0.26%
  • Veröffentlicht 30.11.2022 03:15:13
  • Zuletzt bearbeitet 24.04.2025 20:15:30

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.

7.2

CVE-2022-41406

Exploit
  • EPSS 0.94%
  • Veröffentlicht 12.10.2022 00:15:10
  • Zuletzt bearbeitet 20.05.2025 18:15:44

An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

7.2

CVE-2022-38594

Exploit
  • EPSS 0.26%
  • Veröffentlicht 15.09.2022 02:15:09
  • Zuletzt bearbeitet 21.11.2024 07:16:42

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php.

7.2

CVE-2022-38595

Exploit
  • EPSS 0.26%
  • Veröffentlicht 15.09.2022 02:15:09
  • Zuletzt bearbeitet 21.11.2024 07:16:42

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php.

7.2

CVE-2022-38605

Exploit
  • EPSS 0.26%
  • Veröffentlicht 12.09.2022 21:15:11
  • Zuletzt bearbeitet 21.11.2024 07:16:48

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php.

8.8

CVE-2022-2680

Exploit
  • EPSS 0.25%
  • Veröffentlicht 05.08.2022 21:15:08
  • Zuletzt bearbeitet 21.11.2024 07:01:30

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR (SELECT 7064 FROM(SELECT COUNT...

9.8

CVE-2021-41661

Exploit
  • EPSS 0.51%
  • Veröffentlicht 13.06.2022 23:15:08
  • Zuletzt bearbeitet 21.11.2024 06:26:36

Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the /uploads directory. This can lead to RCE on the web server by uploading a PH...

9.8

CVE-2021-41643

Exploit
  • EPSS 10.73%
  • Veröffentlicht 29.10.2021 17:15:07
  • Zuletzt bearbeitet 21.11.2024 06:26:33

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field.