CVE-2024-3536

A vulnerability has been found in Campcodes Church Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/delete_log.php. The manipulation of the argument selector leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259906 is the identifier assigned to this vulnerability.
Configurations

No configuration.

History

21 Nov 2024, 09:29

Type Values Removed Values Added
References () https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%203.pdf - () https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%203.pdf -
References () https://vuldb.com/?ctiid.259906 - () https://vuldb.com/?ctiid.259906 -
References () https://vuldb.com/?id.259906 - () https://vuldb.com/?id.259906 -
References () https://vuldb.com/?submit.312537 - () https://vuldb.com/?submit.312537 -

11 Apr 2024, 01:26

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad ha sido encontrada en Campcodes Church Management System 1.0 y clasificada como crítica. Esta vulnerabilidad afecta al código desconocido del archivo /admin/delete_log.php. La manipulación del selector de argumentos conduce a la inyección de SQL. El ataque se puede iniciar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-259906 es el identificador asignado a esta vulnerabilidad.

10 Apr 2024, 13:23

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-10 04:15

Updated : 2024-11-21 09:29


NVD link : CVE-2024-3536

Mitre link : CVE-2024-3536

CVE.ORG link : CVE-2024-3536


JSON object : View

Products Affected

No product.

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')