CVE-2022-2680: SourceCodester Church Management System login.php sql injection
First published: Fri Aug 05 2022(Updated: )
A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR (SELECT 7064 FROM(SELECT COUNT(*),CONCAT(0x71627a7671,(SELECT (ELT(7064=7064,1))),0x716b707871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- jURL leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205668.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Church Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-2680?
CVE-2022-2680 is a critical vulnerability found in SourceCodester Church Management System 1.0.
What is the severity of CVE-2022-2680?
CVE-2022-2680 has a severity rating of 8.8, which is considered high.
How does CVE-2022-2680 affect SourceCodester Church Management System?
CVE-2022-2680 affects an unknown function in the file /login.php of SourceCodester Church Management System 1.0.
How can I exploit CVE-2022-2680?
I cannot provide information on exploiting vulnerabilities as it is against ethical guidelines. It is recommended to focus on securing and patching systems to prevent exploitation.
How can I fix CVE-2022-2680?
To fix CVE-2022-2680, it is recommended to apply the latest security patch or update provided by SourceCodester for the Church Management System.
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/title
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/church management system project
- canonical/church management system
- version/church management system/1.0