CVE-2024-3540

A vulnerability was found in Campcodes Church Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_sundaysch.php. The manipulation of the argument Gender leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259910 is the identifier assigned to this vulnerability.
Configurations

No configuration.

History

21 Nov 2024, 09:29

Type Values Removed Values Added
References () https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%207.pdf - () https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%207.pdf -
References () https://vuldb.com/?ctiid.259910 - () https://vuldb.com/?ctiid.259910 -
References () https://vuldb.com/?id.259910 - () https://vuldb.com/?id.259910 -
References () https://vuldb.com/?submit.312541 - () https://vuldb.com/?submit.312541 -

11 Apr 2024, 01:26

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en Campcodes Church Management System 1.0. Ha sido calificada como crítica. Una función desconocida del archivo /admin/add_sundaysch.php es afectada por esta vulnerabilidad. La manipulación del argumento Género conduce a la inyección SQL. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-259910 es el identificador asignado a esta vulnerabilidad.

10 Apr 2024, 13:23

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-10 05:15

Updated : 2024-11-21 09:29


NVD link : CVE-2024-3540

Mitre link : CVE-2024-3540

CVE.ORG link : CVE-2024-3540


JSON object : View

Products Affected

No product.

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')