CVE-2025-6610 itsourcecode Employee Management System editempprofile.php sql injection

A vulnerability was found in itsourcecode Employee Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/editempprofile.php. The manipulation of the argument FirstName leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-6610: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Employee Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/editempprofile.php. The manipulation of the argument FirstName leads to sql injection. It is possible to initiate the attack remotely...

CVE-2021-37781

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

CVE-2021-37781

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

Cross site scripting

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

CVE-2021-37781

CVE-2021-37781 affects Employee Record Management System v1.2. The issue is a Cross-Site Scripting (XSS) vulnerability via editempprofile.php. CVSS v3.1 base score 5.4 (Medium): AV:N, AC:L, PR:L, UI:R, S:C, C:L, I:L, A:N. Impact is Low for confidentiality and integrity, none for availability; exp...

CVE-2021-37782: Improper Neutralization of Special Elements used in an SQL Command

Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...

CVE-2021-37781: Improper Neutralization of Input During Web Page Generation

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

CVE-2021-37782

CVE-2021-37782 affects the Employee Record Management System v1.2. The connected docs indicate a SQL Injection vulnerability in editempprofile.php , with CVSS v3.1 base metrics: 9.8 (CRITICAL), Network attack vector, no user interaction required, no privileges, and full impact on confidentiality,...

CVE-2021-37781

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

CVE-2021-37781

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

Employee Record Management System 跨站脚本漏洞

PHPGurukul Phpgurukul Employee Record Management System is an Employee Record Management System from PHPGurukul, Inc. A cross-site scripting vulnerability exists in Employee Record Management System version 1.2, which stems from a cross-site scripting issue in editempprofile.php...