CM
Vendor
Church Management System Project
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-3541 | CM Church Management System Church Management System Project | 6.1 | Apr 10 | Campcodes Church Management System admin_user.php cross site scripting |
| CVE-2024-3537 | CM Church Management System Church Management System Project | 8.8 | Apr 10 | Campcodes Church Management System admin_user.php sql injection |
| CVE-2022-45328 | CM Church Management System Church Management System Project | 7.2 | Nov 30 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php |
| CVE-2022-41406 | CM Church Management System Church Management System Project | 7.2 | Oct 11 | An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file |
| CVE-2022-38595 | CM Church Management System Church Management System Project | 7.2 | Sep 15 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php |
| CVE-2022-38594 | CM Church Management System Church Management System Project | 7.2 | Sep 15 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php |
| CVE-2022-38605 | CM Church Management System Church Management System Project | 7.2 | Sep 12 | Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php |
| CVE-2022-2680 | CM Church Management System Church Management System Project | 8.8 | Aug 5 | SourceCodester Church Management System login.php sql injection |
| CVE-2021-41661 | CM Church Management System Church Management System Project | 9.8 | Jun 13 | Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the… |
| CVE-2021-41643 | CM Church Management System Church Management System Project | 9.8 | Oct 29 | Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field |