SourceCodester One Church Management System attendancy.php sql injection
CVE-2022-1080

7.3HIGH

Key Information:

Vendor

Sourcecodester
Status
One Church Management System
Vendor
CVE Published:
29 March 2022

What is CVE-2022-1080?

A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects code of the file attendancy.php as the manipulation of the argument search2 leads to sql injection. The attack can be initiated remotely.

Affected Version(s)

One Church Management System 1.0

References

https://vuldb.com/?id.195442
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-1080 : SourceCodester One Church Management System attendancy.php sql injection