Church Management System Project

8 CVEs across 1 Church Management System Project products. Browse Church Management System Project vulnerabilities, severities, and proof-of-concept exploits.

Church Management System Project products with known CVEs

ProductCVEs
Church Management System8
Church Management System Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-45328High7.22022-11-30Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.
CVE-2022-41406High7.22022-10-12An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a…
CVE-2022-38595High7.22022-09-15Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php.
CVE-2022-38594High7.22022-09-15Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php.
CVE-2022-38605High7.22022-09-12Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php.
CVE-2022-2680Medium6.32022-08-05A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. T…
CVE-2021-41661Critical9.82022-06-13Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessib…
CVE-2021-41643Critical9.82021-10-29Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field.