Church Management System Project Church Management System
8 CVEs affecting Church Management System Project Church Management System. Latest disclosed: 2022-11-30. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41661 | Critical | 9.8 | 2022-06-13 | Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessib… |
CVE-2021-41643 | Critical | 9.8 | 2021-10-29 | Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field. |
CVE-2022-45328 | High | 7.2 | 2022-11-30 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php. |
CVE-2022-41406 | High | 7.2 | 2022-10-12 | An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a… |
CVE-2022-38595 | High | 7.2 | 2022-09-15 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php. |
CVE-2022-38594 | High | 7.2 | 2022-09-15 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php. |
CVE-2022-38605 | High | 7.2 | 2022-09-12 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php. |
CVE-2022-2680 | Medium | 6.3 | 2022-08-05 | A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. T… |