Lucene search
K

6 matches found

CNVD
CNVD
added 2025/12/15 12:0 a.m.3 views

Employee Profile Management System edit_personnel.php File SQL Injection Vulnerability

Employee Profile Management System is an employee profile management system. The Employee Profile Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter perid in the file editpersonnel.php. An...

9.8CVSS8.3AI score0.00326EPSS
Exploits1References1
OSV
OSV
added 2025/12/09 1:16 a.m.7 views

CVE-2025-14285

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

9.8CVSS5.8AI score0.00326EPSS
Exploits1References5
NVD
NVD
added 2025/12/09 1:16 a.m.7 views

CVE-2025-14285

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

9.8CVSS0.00326EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/09 1:2 a.m.29 views

CVE-2025-14285 code-projects Employee Profile Management System edit_personnel.php sql injection

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

7.5CVSS0.00326EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/09 1:2 a.m.5 views

EUVD-2025-201842

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

7.5CVSS6.5AI score0.00326EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.4 views

PT-2025-49687

Name of the Vulnerable Software and Affected Versions code-projects Employee Profile Management System version 1.0 Description A flaw exists in the Employee Profile Management System that allows for remote code execution. The issue is located in the edit personnel.php file, specifically within an...

9.8CVSS7.9AI score0.00326EPSS
Exploits1References9
Rows per page
Query Builder