Church Management System vulnerabilities

2 known vulnerabilities in Church Management System from Church Management System Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Church Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3537Apr 10, 2024CampCodes

  A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/admin_user.php. The manipulation of the argument firstname leads to sql injection. The attack may be i

• 7.2 High severity

  Church Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-41406Oct 12, 2022Church Management System ProjectEPSS 1.41%

  An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.