Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. Employee Managment System v1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /aprocess.php...

CVE-2024-25212

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...

CVE-2024-25212

CVE-2024-25212 – SQL injection in Employee Management System v1.0 affects the delete.php endpoint, exploitable via the id parameter. The vulnerability is confirmed to enable SQL injection with an attack vector described as network access, requiring no user interaction, and with high impact on con...

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

CVE-2024-25215

CVE-2024-25215 affects Employee Management System v1.0, vulnerable via the pwd parameter in /aprocess.php to a SQL injection. Root cause: improper input handling enabling unauthenticated network access with high impact on confidentiality, integrity, and availability. Connected docs mention remedi...

PT-2024-20822 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/delete.php" API endpoint. Recommendations: For Employee Managment Syst...

CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

PT-2024-20823 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/edit.php" API endpoint. Recommendations: For Employee Managment System...

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

CVE-2024-25212

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...

CVE-2024-25216

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...

CVE-2024-25214

CVE-2024-25214 affects the Employee Managment System v1.0. The issue allows authentication bypass by injecting a crafted payload into the E-mail and Password parameters at the /alogin.html endpoint. Public reports consistently describe a critical impact (C/H/I/A) with network access and no user i...

PT-2024-20824 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: An issue in the Employee Managment System allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at the "/alogin.html" API endpoint...

CVE-2024-25216

CVE-2024-25216 affects the Employee Management System v1.0. A SQL injection vulnerability exists via the mailud parameter in /aprocess.php. The CVSS v3.1 score is 9.8 (CRITICAL) with impacts to confidentiality, integrity, and availability. Exploit details are not provided in the connected documen...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. Employee Managment System v1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /aprocess.php...

PT-2024-20825 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: A SQL injection vulnerability was discovered in Employee Managment System via the pwd parameter at the "/aprocess.php" API endpoint. Recommendations: For Employee Managment System version 1.0...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0, which originates from a SQL injection vulnerability in the file /delete.php...

CVE-2024-25216

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...

CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0 that originates from allowing an attacker to bypass authentication by injecting a payload into the /alogin.html parameter...