https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-45328.htmlhttps://patchthecve.com/cve/CVE-2022-45328.htmlWed, 17 Jun 2026 05:09:47 +0000HIGH 7.2: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.https://patchthecve.com/cve/CVE-2022-41406.htmlhttps://patchthecve.com/cve/CVE-2022-41406.htmlWed, 17 Jun 2026 05:03:09 +0000HIGH 7.2: An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-38595.htmlhttps://patchthecve.com/cve/CVE-2022-38595.htmlWed, 17 Jun 2026 04:56:53 +0000HIGH 7.2: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php.https://patchthecve.com/cve/CVE-2022-38594.htmlhttps://patchthecve.com/cve/CVE-2022-38594.htmlWed, 17 Jun 2026 04:56:52 +0000HIGH 7.2: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php.https://patchthecve.com/cve/CVE-2022-38605.htmlhttps://patchthecve.com/cve/CVE-2022-38605.htmlWed, 17 Jun 2026 04:56:53 +0000HIGH 7.2: Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php.https://patchthecve.com/cve/CVE-2022-2680.htmlhttps://patchthecve.com/cve/CVE-2022-2680.htmlWed, 17 Jun 2026 04:42:21 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR (SELECT 7064 FROM(SELECT COUNT(*),CONCAT(0x71627a7671,(SELECT (ELT(7064=7064,1))https://patchthecve.com/cve/CVE-2021-41661.htmlhttps://patchthecve.com/cve/CVE-2021-41661.htmlWed, 17 Jun 2026 04:08:47 +0000CRITICAL 9.8: Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the /uploads directory. This can lead to RCE on the web server by uploading a PHP webshell.https://patchthecve.com/cve/CVE-2021-41643.htmlhttps://patchthecve.com/cve/CVE-2021-41643.htmlWed, 17 Jun 2026 04:08:45 +0000CRITICAL 9.8: Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field.