A vulnerability classified as critical has been found in SourceCodester Best Church Management Software 1.1. Affected is an unknown function of the file /admin/edit_slider.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/Yesec/Best-church-management-software/blob/main/edit_slider.php.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.295110 | Permissions Required VDB Entry |
| https://vuldb.com/?id.295110 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.496954 | VDB Entry |
| https://www.sourcecodester.com/ | Product |
Configurations
History
18 Feb 2025, 18:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?ctiid.295110 - Permissions Required, VDB Entry | |
| References | () https://www.sourcecodester.com/ - Product | |
| References | () https://vuldb.com/?submit.496954 - VDB Entry | |
| References | () https://github.com/Yesec/Best-church-management-software/blob/main/edit_slider.php.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.295110 - Permissions Required, VDB Entry | |
| CPE | cpe:2.3:a:mayurik:best_church_management_software:1.1:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Mayurik
Mayurik best Church Management Software |
|
| CWE |
12 Feb 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-12 15:15
Updated : 2025-02-18 18:02
NVD link : CVE-2025-1202
Mitre link : CVE-2025-1202
JSON object : View
Products Affected
mayurik
- best_church_management_software
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')