CVE-2022-1080CWE-89

SourceCodester One Church Management System attendancy.php sql injection

High · published March 29, 2022

CVSS v3.1
7.3
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects code of the file attendancy.php as the manipulation of the argument search2 leads to sql injection. The attack can be initiated remotely.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00684 · 52.0th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-03-29T05:50Z
EPSS history
Timeline
  • 29 MAR 05:50Z
    SourceCodester One Church Management System attendancy.php sql injection
    cvelistv5