CVE-2022-2680: SourceCodester Church Management System login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR (SELECT 7064 FROM(SELECT COUNT(),CONCAT(0x71627a7671,(SELECT (ELT(7064=7064,1))),0x716b707871,FLOOR(RAND(0)2))x FROM INFORMATIONSCHEMA.PLUGINS GROUP BY x)a)-- jURL leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205668.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-2680?
CVE-2022-2680 is a critical vulnerability found in SourceCodester Church Management System 1.0.
What is the severity of CVE-2022-2680?
CVE-2022-2680 has a severity rating of 8.8, which is considered high.
How does CVE-2022-2680 affect SourceCodester Church Management System?
CVE-2022-2680 affects an unknown function in the file /login.php of SourceCodester Church Management System 1.0.
How can I exploit CVE-2022-2680?
I cannot provide information on exploiting vulnerabilities as it is against ethical guidelines. It is recommended to focus on securing and patching systems to prevent exploitation.
How can I fix CVE-2022-2680?
To fix CVE-2022-2680, it is recommended to apply the latest security patch or update provided by SourceCodester for the Church Management System.