CVE-2024-3534

A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259904.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%201.pdfExploit
• https://vuldb.com/?ctiid.259904Permissions Required, VDB Entry
• https://vuldb.com/?id.259904Permissions Required, VDB Entry
• https://vuldb.com/?submit.312535Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%201.pdfExploit
• https://vuldb.com/?ctiid.259904Permissions Required, VDB Entry
• https://vuldb.com/?id.259904Permissions Required, VDB Entry
• https://vuldb.com/?submit.312535Third Party Advisory, VDB Entry

Published

Apr 10, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35328Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-35329Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-3533A vulnerability classified as problematic was found in Campc…6.1
• CVE-2024-35333A stack-buffer-overflow vulnerability exists in the read_cha…8.4
• CVE-2024-35338Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded…9.8
• CVE-2024-35339Tenda FH1206 V1.2.0.8(8155) was discovered to contain a comm…9.8
• CVE-2024-35340Tenda FH1206 V1.2.0.8(8155) was discovered to contain a comm…8.6
• CVE-2024-35341Certain Anpviz products allow unauthenticated users to downl…7.5
• CVE-2024-35342Certain Anpviz products allow unauthenticated users to modif…4.6
• CVE-2024-35343Certain Anpviz products allow unauthenticated users to downl…9.8
• CVE-2024-35344Certain Anpviz products contain a hardcoded cryptographic ke…9.9
• CVE-2024-35345A vulnerability has been discovered in Diño Physics School A…5.4