One Church Management System Security Vulnerabilities and Issues — One Church Management System CVE List

One Church Management System ProjectOne Church Management System

3 matches found

CVE•added 2022/03/29 5:50 a.m.•65 views

CVE-2022-1084

CVE-2022-1084 affects SourceCodester One Church Management System 1.0. An authentication bypass is caused by improper access control in /one_church/userregister.php, enabling remote exploitation. Documented as critical (CVSSv3.1 base score 9.8; CVSSv2 7.5). No remediation or exploit details are p...

9.8CVSS8.7AI score0.00922EPSS

CVE•added 2022/03/29 5:50 a.m.•58 views

CVE-2022-1080

CVE-2022-1080 affects SourceCodester One Church Management System 1.0. The vulnerability is a SQL injection in the attendancy.php file caused by unsafely handling the search2 parameter, allowing an attacker to manipulate SQL statements. Exploitation can be performed remotely. The available connec...

9.8CVSS8.7AI score0.00657EPSS

CVE•added 2022/03/29 5:50 a.m.•54 views

CVE-2022-1079

CVE-2022-1079 affects SourceCodester One Church Management System (churchprofile.php and other files/parameters) with a cross-site scripting vulnerability due to insufficient input validation and output encoding. Impact: an attacker can remotely craft inputs to execute JavaScript in a victim’s br...

6.1CVSS5.1AI score0.0054EPSS