CVE-2022-45328: SQL Injection
Published Nov 30, 2022
·Updated
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editmembers.php.
Affected Software
1 affected component
Church Management System Project Church Management System=1.0
Event History
Nov 30, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-45328?
CVE-2022-45328 is a SQL injection vulnerability discovered in Church Management System v1.0.
2
How does CVE-2022-45328 affect Church Management System v1.0?
CVE-2022-45328 allows an attacker to perform SQL injection attacks through the 'id' parameter in the '/admin/edit_members.php' endpoint of Church Management System v1.0.
3
How severe is CVE-2022-45328?
CVE-2022-45328 has a severity rating of 7.2 (high).
4
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2022-45328?
The CWE ID associated with CVE-2022-45328 is CWE-89 (SQL Injection).
5
How can I fix the SQL injection vulnerability in Church Management System v1.0?
To fix the SQL injection vulnerability in Church Management System v1.0, it is recommended to implement proper input validation and parameterized queries to prevent malicious SQL statements.