CVE-2022-38605: SQL Injection
First published: Mon Sep 12 2022(Updated: )
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Church Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the Church Management System?
The vulnerability ID for the Church Management System is CVE-2022-38605.
What is the severity of the CVE-2022-38605 vulnerability?
The severity of the CVE-2022-38605 vulnerability is high with a severity value of 7.2.
How does the SQL injection vulnerability in Church Management System v1.0 work?
The SQL injection vulnerability in Church Management System v1.0 works by exploiting the id parameter at /admin/edit_event.php.
What software version is affected by the CVE-2022-38605 vulnerability?
The Church Management System v1.0 is affected by the CVE-2022-38605 vulnerability.
Is there a fix available for the SQL injection vulnerability in Church Management System v1.0?
To fix the SQL injection vulnerability in Church Management System v1.0, it is recommended to apply the latest security patches or updates provided by the vendor.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/references
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- vendor/church management system project
- canonical/church management system
- version/church management system/1.0