Vulnerability · Published Mar 29, 2022 · Assigned by VulDB
CVE-2022-1084SourceCodester One Church Management System Session userregister.php improper authentication
High 7.3
In plain English
A high-severity improper authentication in One Church Management System from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)1.0%top 38.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /one_church/userregister.php. The manipulation leads to authentication bypass. The attack can be launched remotely.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | One Church Management System | 1.0 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- https://vuldb.com/?id.195643 x_refsource_MISC