Approved changes feed: RSS · Atom

cpe:2.3:a:campcodes:church_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCampcodes (0cbc38b8-6075-5b10-9920-3b1d3efa5f42)
ProductChurch Management System (c58aa2ea-88c3-507e-9d1f-9891669234b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3542 vulnerable 2026-06-03 14:56:24.641979 Campcodes Church Management System add_visitor.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in Campcodes Church Management System 1.0. This vulnerability affects unknown code of the file /admin/add_visitor.php. The manipulation of the argument mobile leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259912.
Published: 2024-04-10T06:00:05.433Z
Updated: 2024-08-01T20:12:07.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3541 vulnerable 2026-06-03 14:56:24.641566 Campcodes Church Management System admin_user.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/admin_user.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259911.
Published: 2024-04-10T05:31:05.183Z
Updated: 2024-08-01T20:12:07.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3540 vulnerable 2026-06-03 14:56:24.641077 Campcodes Church Management System add_sundaysch.php sql injection
MEDIUM (6.3)
A vulnerability was found in Campcodes Church Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_sundaysch.php. The manipulation of the argument Gender leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259910 is the identifier assigned to this vulnerability.
Published: 2024-04-10T05:00:06.098Z
Updated: 2024-08-01T20:12:07.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3539 vulnerable 2026-06-03 14:56:24.640678 Campcodes Church Management System addgiving.php sql injection
MEDIUM (6.3)
A vulnerability was found in Campcodes Church Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addgiving.php. The manipulation of the argument amount leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259909 was assigned to this vulnerability.
Published: 2024-04-10T05:00:04.707Z
Updated: 2024-08-01T20:12:07.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3538 vulnerable 2026-06-03 14:56:24.640052 Campcodes Church Management System addTithes.php sql injection
MEDIUM (6.3)
A vulnerability was found in Campcodes Church Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/addTithes.php. The manipulation of the argument na leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259908.
Published: 2024-04-10T04:31:05.223Z
Updated: 2024-08-01T20:12:07.653Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3537 vulnerable 2026-06-03 14:56:24.639573 Campcodes Church Management System admin_user.php sql injection
MEDIUM (6.3)
A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/admin_user.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259907.
Published: 2024-04-10T04:00:05.135Z
Updated: 2024-08-01T20:12:07.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3536 vulnerable 2026-06-03 14:56:24.637842 Campcodes Church Management System delete_log.php sql injection
MEDIUM (6.3)
A vulnerability has been found in Campcodes Church Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/delete_log.php. The manipulation of the argument selector leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259906 is the identifier assigned to this vulnerability.
Published: 2024-04-10T03:31:04.604Z
Updated: 2024-08-01T20:12:07.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3535 vulnerable 2026-06-03 14:56:24.637189 Campcodes Church Management System index.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259905 was assigned to this vulnerability.
Published: 2024-04-10T03:00:05.144Z
Updated: 2024-08-01T20:12:07.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3534 vulnerable 2026-06-03 14:56:24.635635 Campcodes Church Management System login.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259904.
Published: 2024-04-10T02:31:04.876Z
Updated: 2024-08-01T20:12:07.634Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.