CVE-2022-1080

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects code of the file attendancy.php as the manipulation of the argument search2 leads to sql injection. The attack can be initiated remotely.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	One Church Management System	1.0

References

https://vuldb.com/?id.195442Third Party Advisory
https://vuldb.com/?id.195442Third Party Advisory

Timeline

Published: Mar 29, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-10816.1A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affe CVE-2022-10829.8A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /CVE-2022-10839.8A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_nu CVE-2022-10849.8A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vulnerability is an un CVE-2022-10856.1A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Han CVE-2022-10865.4A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Management Page. The m CVE-2022-10875.4A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profile Module. The manipu CVE-2022-10884.8The Page Security & Membership WordPress plugin through 1.5.15 does not sanitise and escape some of its settings, which could allow high pri CVE-2022-10894.8The Bulk Edit and Create User Profiles WordPress plugin before 1.5.14 does not sanitise and escape the Users Login, which could allow high p CVE-2022-10904.8The Good & Bad Comments WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users suc CVE-2022-10916.1The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upl CVE-2022-10924.3The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX action, allowi