CVE-2022-38594: SQL Injection
Published Sep 15, 2022
·Updated
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editvisitor.php.
Affected Software
1 affected component
Church Management System Project Church Management System=1.0
Event History
Sep 15, 2022
CVE Published
via MITRE·01:12 AM
Data Sourced
via MITRE·01:12 AM
Description
Frequently Asked Questions
1
What is CVE-2022-38594?
CVE-2022-38594 is a SQL injection vulnerability in Church Management System v1.0.
2
How does CVE-2022-38594 affect the Church Management System?
CVE-2022-38594 allows attackers to perform SQL injection attacks through the 'id' parameter in the /admin/edit_visitor.php endpoint of the Church Management System v1.0.
3
What is the severity of CVE-2022-38594?
CVE-2022-38594 has a severity rating of 7.2, which is considered high.
4
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2022-38594?
CVE-2022-38594 is associated with CWE-89, which represents a SQL injection vulnerability.
5
How can I mitigate the SQL injection vulnerability in the Church Management System v1.0?
To mitigate the SQL injection vulnerability in Church Management System v1.0, ensure that user input is properly validated and sanitized before being used in SQL queries.