Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-35544
HistoryMar 31, 2022 - 12:00 a.m.

SourceCodester One Church Management System SQL注入漏洞

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
sourcecodester inc. sql injection cybersecurity loophole sensitive database data exploit

EPSS

0.001

Percentile

50.2%

SourceCodester One Church Management System is an application of SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester One Church Management System version 1.0, which stems from The search2 parameter of attachancy.php lacks validation for external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data.

EPSS

0.001

Percentile

50.2%

Related for CNVD-2022-35544