https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-3542.htmlhttps://patchthecve.com/cve/CVE-2024-3542.htmlWed, 17 Jun 2026 07:44:28 +0000LOW 3.5: A vulnerability classified as problematic was found in Campcodes Church Management System 1.0. This vulnerability affects unknown code of the file /admin/add_visitor.php. The manipulation of the argument mobile leads to cross site scripting. The attack can be initiated remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2024-3541.htmlhttps://patchthecve.com/cve/CVE-2024-3541.htmlWed, 17 Jun 2026 07:44:28 +0000LOW 3.5: A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/admin_user.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit hahttps://patchthecve.com/cve/CVE-2024-3540.htmlhttps://patchthecve.com/cve/CVE-2024-3540.htmlWed, 17 Jun 2026 07:44:28 +0000MEDIUM 6.3: A vulnerability was found in Campcodes Church Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_sundaysch.php. The manipulation of the argument Gender leads to sql injection. The attack may be launched remotely. The explhttps://patchthecve.com/cve/CVE-2024-3539.htmlhttps://patchthecve.com/cve/CVE-2024-3539.htmlWed, 17 Jun 2026 07:44:28 +0000MEDIUM 6.3: A vulnerability was found in Campcodes Church Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addgiving.php. The manipulation of the argument amount leads to sql injection. The attack can be launched remotely. Thehttps://patchthecve.com/cve/CVE-2024-3538.htmlhttps://patchthecve.com/cve/CVE-2024-3538.htmlWed, 17 Jun 2026 07:44:28 +0000MEDIUM 6.3: A vulnerability was found in Campcodes Church Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/addTithes.php. The manipulation of the argument na leads to sql injection. It is possible to launch the attack remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2024-3537.htmlhttps://patchthecve.com/cve/CVE-2024-3537.htmlWed, 17 Jun 2026 07:44:28 +0000MEDIUM 6.3: A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/admin_user.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been https://patchthecve.com/cve/CVE-2024-3536.htmlhttps://patchthecve.com/cve/CVE-2024-3536.htmlWed, 17 Jun 2026 07:44:28 +0000MEDIUM 6.3: A vulnerability has been found in Campcodes Church Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/delete_log.php. The manipulation of the argument selector leads to sql injection. The attack can be initiated remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2024-3535.htmlhttps://patchthecve.com/cve/CVE-2024-3535.htmlWed, 17 Jun 2026 07:44:28 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2024-3534.htmlhttps://patchthecve.com/cve/CVE-2024-3534.htmlWed, 17 Jun 2026 07:44:27 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit https://patchthecve.com/cve/CVE-2022-45328.htmlhttps://patchthecve.com/cve/CVE-2022-45328.htmlWed, 17 Jun 2026 05:09:47 +0000HIGH 7.2: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.https://patchthecve.com/cve/CVE-2022-41406.htmlhttps://patchthecve.com/cve/CVE-2022-41406.htmlWed, 17 Jun 2026 05:03:09 +0000HIGH 7.2: An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-38595.htmlhttps://patchthecve.com/cve/CVE-2022-38595.htmlWed, 17 Jun 2026 04:56:53 +0000HIGH 7.2: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php.https://patchthecve.com/cve/CVE-2022-38594.htmlhttps://patchthecve.com/cve/CVE-2022-38594.htmlWed, 17 Jun 2026 04:56:52 +0000HIGH 7.2: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php.https://patchthecve.com/cve/CVE-2022-38605.htmlhttps://patchthecve.com/cve/CVE-2022-38605.htmlWed, 17 Jun 2026 04:56:53 +0000HIGH 7.2: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php.https://patchthecve.com/cve/CVE-2022-2680.htmlhttps://patchthecve.com/cve/CVE-2022-2680.htmlWed, 17 Jun 2026 04:42:21 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR (SELECT 7064 FROM(SELECT COUNT(*),CONCAT(0x71627a7671,(SELECT (ELT(7064=7064,1))https://patchthecve.com/cve/CVE-2021-41661.htmlhttps://patchthecve.com/cve/CVE-2021-41661.htmlWed, 17 Jun 2026 04:08:47 +0000CRITICAL 9.8: Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the /uploads directory. This can lead to RCE on the web server by uploading a PHP webshell.https://patchthecve.com/cve/CVE-2021-41643.htmlhttps://patchthecve.com/cve/CVE-2021-41643.htmlWed, 17 Jun 2026 04:08:45 +0000CRITICAL 9.8: Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field.