CVE-2025-7127

CVE-2025-7127 affects itsourcecode Employee Management System up to v1.0, with a SQL injection in /admin/changepassword.php caused by unsafely handling the currentpassword parameter. Exploitation can be performed remotely; public disclosure is noted. Connected sources also suggest mitigations suc...

CVE-2025-7127 itsourcecode Employee Management System changepassword.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack...

CVE-2025-7127 itsourcecode Employee Management System changepassword.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack...

CVE-2025-7126 itsourcecode Employee Management System adminprofile.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. Affected by this issue is some unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminName leads to sql injection. The attack may be...

CVE-2025-7126

CVE-2025-7126 affects itsourcecode Employee Management System up to version 1.0. The vulnerability resides in the /admin/adminprofile.php file where the AdminName argument can be manipulated to trigger a SQL injection. The impact is described as remote exploitation with public disclosure of the e...

CVE-2025-7126 itsourcecode Employee Management System adminprofile.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. Affected by this issue is some unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminName leads to sql injection. The attack may be...

CVE-2025-7125

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched...

CVE-2025-7125

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched...

CVE-2025-7125 itsourcecode Employee Management System editempeducation.php sql injection

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched...

CVE-2025-7125 itsourcecode Employee Management System editempeducation.php sql injection

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched...

CVE-2025-7125

The CVE-2025-7125 entry concerns the itsourcecode Employee Management System (up to version 1.0). The vulnerability stems from improper handling of the coursepg parameter in the file /admin/editempeducation.php, enabling a SQL injection. It is exploitable remotely, and public exploit information ...

CVE-2025-45065

CVE-2025-45065 concerns a SQL injection in the Loginerms.php endpoint of the Employee Record Management System in PHP and MySQL v1. The vulnerability affects the loginerms.php component, arising from insufficient input handling, allowing potentially arbitrary SQL execution. Impact as stated: high...

The vulnerability of the adminprofile.php (/admin/adminprofile.php) script of the Employee Management System allows a hacker to execute arbitrary code.

The vulnerability of the adminprofile.php /admin/adminprofile.php script of the Employee Management System is related to the failure to eliminate special elements during the processing of the AdminName parameter. Exploiting this vulnerability allows an attacker operating remotely to execute...

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is a itsourcecode open source employee management system. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from an improper handling of the parameter currentpassword in the file...

The vulnerability in the editempeducation.php (/admin/editempeducation.php) script of the Employee Management System allows a perpetrator to execute arbitrary code.

The vulnerability of the editempeducation.php /admin/editempeducation.php script of the Employee Management System is related to the failure to remove special elements during the processing of the coursepg parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is an open source employee management system from itsourcecode. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from an improper handling of the parameter AdminName in the file...

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is a itsourcecode open source employee management system. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from improper handling of the parameter coursepg in the file...

The vulnerability of the changepassword.php (/admin/changepassword.php) script of the Employee Management System allows a perpetrator to execute arbitrary code.

The vulnerability of the changepassword.php /admin/changepassword.php script of the Employee Management System is related to the failure to remove special elements during the processing of the currentpassword parameter. Exploiting this vulnerability allows an attacker operating remotely to execut...

CVE-2025-6961

A vulnerability, which was classified as critical, has been found in Campcodes Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /mark.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2025-6963

A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /myprofile.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...