Church Management System Project

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Church Management System Project records in CISA KEV

No Church Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Church Management System 8 records HIGH

Records

8 records

TI-2022-02478 CVE-2022-2680 · GHSA-v254-64cc-mh45

SourceCodester Church Management System login.php sql injection

HIGH 71

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00776 Published 2022-08-05 No fix listed CWE-89

TI-2022-22305 CVE-2022-45328 · GHSA-87pm-r9rr-fc3c

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via…

HIGH 67

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-30 No fix listed CWE-89

TI-2022-19869 CVE-2022-41406 · GHSA-3h9q-66fh-rfg5

An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church…

HIGH 67

An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01411 Published 2022-10-11 No fix listed CWE-434

TI-2021-18348 CVE-2021-41643 · GHSA-m69j-g7w3-95h5

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management…

MEDIUM 49

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.046 Published 2021-10-29 No fix listed CWE-434

TI-2021-18363 CVE-2021-41661 · GHSA-2j4g-q4pc-fmcw

Church Management System version 1.0 is affected by a SQL anjection vulnerability through…

MEDIUM 45

Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the /uploads directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01297 Published 2022-06-13 No fix listed CWE-89

TI-2022-18162 CVE-2022-38605 · GHSA-4r28-g5f4-47g4

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via…

LOW 34

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0102 Published 2022-09-12 No fix listed CWE-89

TI-2022-18158 CVE-2022-38595 · GHSA-4wgf-vrrq-7p5q

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via…

LOW 33

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00883 Published 2022-09-15 No fix listed CWE-89

TI-2022-18157 CVE-2022-38594 · GHSA-h27r-q3jf-rm93

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via…

LOW 33

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00883 Published 2022-09-15 No fix listed CWE-89

Open these records in search →

Critical	2
High	6
Medium	0
Low	0
No CVSS	0