CM
Product
Church Management System
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 1Low 0
Watch
Add Church Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-41661 | 9.8 | Jun 13 | Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the… Affected: 1.0 |
| CVE-2021-41643 | 9.8 | Oct 29 | Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field Affected: 1.0 |
| CVE-2024-3537 | 8.8 | Apr 10 | Campcodes Church Management System admin_user.php sql injection Affected: 1.0 |
| CVE-2022-2680 | 8.8 | Aug 5 | SourceCodester Church Management System login.php sql injection Affected: 1.0 |
| CVE-2022-45328 | 7.2 | Nov 30 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php Affected: 1.0 |
| CVE-2022-41406 | 7.2 | Oct 11 | An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file Affected: 1.0 |
| CVE-2022-38595 | 7.2 | Sep 15 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php Affected: 1.0 |
| CVE-2022-38594 | 7.2 | Sep 15 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php Affected: 1.0 |
| CVE-2022-38605 | 7.2 | Sep 12 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php Affected: 1.0 |
| CVE-2024-3541 | 6.1 | Apr 10 | Campcodes Church Management System admin_user.php cross site scripting Affected: 1.0 |
Showing 10
