2 matches found
CVE-2025-8167: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editmembers.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launch...
5.4CVSS3.8AI score0.00361EPSS
SaveExploits1References1
CVE-2022-45328: Improper Neutralization of Special Elements used in an SQL Command
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editmembers.php...
7.2CVSS5.8AI score0.00762EPSS
SaveExploits1References3
20