SourceCodester One Church Management System attendancy.php sql injection
CVE-2022-1080

9.8CRITICAL

Key Information:

Vendor
SourceCodester
Status
One Church Management System
Vendor
CVE Published:
29 March 2022

Summary

A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects code of the file attendancy.php as the manipulation of the argument search2 leads to sql injection. The attack can be initiated remotely.

Affected Version(s)

One Church Management System 1.0

References

https://vuldb.com/?id.195442
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.