CVE-2022-2680

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR (SELECT 7064 FROM(SELECT COUNT(*),CONCAT(0x71627a7671,(SELECT (ELT(7064=7064,1))),0x716b707871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- jURL leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205668.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Aug 5, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-268017.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-268027.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-268037.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-268047.8Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-268057.8Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-268067.8Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-268077.0Windows Work Folder Service Elevation of Privilege Vulnerability CVE-2022-268087.0Windows File Explorer Elevation of Privilege Vulnerability CVE-2022-268099.8Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2022-26816.1A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an CVE-2022-268107.8Windows File Server Resource Management Service Elevation of Privilege Vulnerability CVE-2022-268117.2Windows DNS Server Remote Code Execution Vulnerability