CVE-2022-2680

CVE-2022-2680 affects the SourceCodester Church Management System 1.0, specifically the vulnerable /login.php function where manipulating the username parameter enables a remote SQL injection . The root cause is undocumented in the initial description, but multiple connected sources confirm a con...