GCVE - cpe:2.3:a:carmelo:church_donation_system:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:carmelo:church_donation_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Carmelo (`6b035a27-935d-5e7e-afc6-e62cb1b98eda`)
Product	Church Donation System (`2d56e3b6-b04a-5119-bca4-62d94a676ec7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-8167`	vulnerable	2026-06-03 15:13:43.039769	code-projects Church Donation System edit_members.php cross site scripting LOW (3.5) A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_members.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Published: 2025-07-25T19:32:05.138Z Updated: 2025-07-25T19:58:39.013Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317581 https://vuldb.com/?ctiid.317581 https://vuldb.com/?submit.620742 https://github.com/enigma522/cve/issues/2 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8166`	vulnerable	2026-06-03 15:13:43.039272	code-projects Church Donation System HTTP POST Request index.php sql injection HIGH (7.3) A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-25T19:02:05.109Z Updated: 2025-07-25T20:35:15.499Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317580 https://vuldb.com/?ctiid.317580 https://vuldb.com/?submit.620736 https://github.com/enigma522/cve/issues/1 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7931`	vulnerable	2026-06-03 15:13:41.848251	code-projects Church Donation System admin_pic.php unrestricted upload HIGH (7.3) A vulnerability was found in code-projects Church Donation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /members/admin_pic.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-21T16:32:05.823Z Updated: 2025-07-21T17:56:23.779Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317060 https://vuldb.com/?ctiid.317060 https://vuldb.com/?submit.618946 https://github.com/n0name-yang/myCVE/issues/16 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7930`	vulnerable	2026-06-03 15:13:41.847728	code-projects Church Donation System add_members.php sql injection HIGH (7.3) A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /members/add_members.php. The manipulation of the argument mobile leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Published: 2025-07-21T16:02:05.524Z Updated: 2025-07-21T18:51:31.692Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317059 https://vuldb.com/?ctiid.317059 https://vuldb.com/?submit.618944 https://github.com/n0name-yang/myCVE/issues/15 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7929`	vulnerable	2026-06-03 15:13:41.847180	code-projects Church Donation System edit_Members.php sql injection HIGH (7.3) A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /members/edit_Members.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Published: 2025-07-21T15:32:05.745Z Updated: 2025-07-21T15:46:21.162Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317058 https://vuldb.com/?ctiid.317058 https://vuldb.com/?submit.618943 https://github.com/n0name-yang/myCVE/issues/14 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7928`	vulnerable	2026-06-03 15:13:41.846710	code-projects Church Donation System edit_user.php sql injection HIGH (7.3) A vulnerability was found in code-projects Church Donation System 1.0 and classified as critical. This issue affects some unknown processing of the file /members/edit_user.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Published: 2025-07-21T15:02:05.610Z Updated: 2025-07-21T15:42:24.418Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317057 https://vuldb.com/?ctiid.317057 https://vuldb.com/?submit.618942 https://github.com/n0name-yang/myCVE/issues/13 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7861`	vulnerable	2026-06-03 15:13:41.698899	code-projects Church Donation System search.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, was found in code-projects Church Donation System 1.0. Affected is an unknown function of the file /members/search.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-20T01:03:51.229Z Updated: 2025-07-22T14:16:40.837Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316974 https://vuldb.com/?ctiid.316974 https://vuldb.com/?submit.616925 https://github.com/n0name-yang/myCVE/issues/12 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7860`	vulnerable	2026-06-03 15:13:41.698414	code-projects Church Donation System login_admin.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of the file /members/login_admin.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-20T00:32:05.710Z Updated: 2025-07-22T14:17:25.565Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316973 https://vuldb.com/?ctiid.316973 https://vuldb.com/?submit.616923 https://github.com/n0name-yang/myCVE/issues/11 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7859`	vulnerable	2026-06-03 15:13:41.697944	code-projects Church Donation System update_password_admin.php sql injection HIGH (7.3) A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/update_password_admin.php. The manipulation of the argument new_password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-20T00:02:06.024Z Updated: 2025-07-22T14:19:16.163Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316972 https://vuldb.com/?ctiid.316972 https://vuldb.com/?submit.616921 https://github.com/n0name-yang/myCVE/issues/10 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7833`	vulnerable	2026-06-03 15:13:41.579938	code-projects Church Donation System giving.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of the file /members/giving.php. The manipulation of the argument Amount leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-19T15:44:05.546Z Updated: 2025-07-21T15:54:22.394Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316937 https://vuldb.com/?ctiid.316937 https://vuldb.com/?submit.616919 https://github.com/n0name-yang/myCVE/issues/9 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7832`	vulnerable	2026-06-03 15:13:41.579565	code-projects Church Donation System offering.php sql injection HIGH (7.3) A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/offering.php. The manipulation of the argument trcode leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-19T15:14:05.661Z Updated: 2025-07-21T15:53:36.929Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316936 https://vuldb.com/?ctiid.316936 https://vuldb.com/?submit.616918 https://github.com/n0name-yang/myCVE/issues/8 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7831`	vulnerable	2026-06-03 15:13:41.578986	code-projects Church Donation System Tithes.php sql injection HIGH (7.3) A vulnerability classified as critical has been found in code-projects Church Donation System 1.0. This affects an unknown part of the file /members/Tithes.php. The manipulation of the argument trcode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-19T15:02:05.277Z Updated: 2025-07-21T15:52:36.599Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316935 https://vuldb.com/?ctiid.316935 https://vuldb.com/?submit.616917 https://github.com/n0name-yang/myCVE/issues/7 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7830`	vulnerable	2026-06-03 15:13:41.578471	code-projects Church Donation System reg.php sql injection HIGH (7.3) A vulnerability was found in code-projects Church Donation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /reg.php. The manipulation of the argument mobile leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Published: 2025-07-19T14:32:05.487Z Updated: 2025-07-21T15:51:55.887Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316934 https://vuldb.com/?ctiid.316934 https://vuldb.com/?submit.616886 https://github.com/n0name-yang/myCVE/issues/6 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7829`	vulnerable	2026-06-03 15:13:41.577888	code-projects Church Donation System login.php sql injection HIGH (7.3) A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-19T13:14:05.666Z Updated: 2025-07-21T15:50:52.954Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316933 https://vuldb.com/?ctiid.316933 https://vuldb.com/?submit.616884 https://github.com/n0name-yang/myCVE/issues/5 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.