CVE-2024-1010 SourceCodester Employee Management System edit-profile.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is...

CVE-2024-1010 SourceCodester Employee Management System edit-profile.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is...

CVE-2024-1010

CVE-2024-1010 describes a cross-site scripting vulnerability in SourceCodester Employee Management System 1.0, affecting the edit-profile.php file. The issue arises from manipulating the parameters fullname, phone, date of birth, address, and date of appointment, enabling remote, client-side scri...

CVE-2024-1009

CVE-2024-1009 pertains to SourceCodester Employee Management System 1.0. The vulnerability is a SQL injection in the /Admin/login.php file, caused by manipulation of the txtusername parameter. This can be exploited remotely, with the exploit publicly disclosed. Documents consistently describe the...

CVE-2024-1009 SourceCodester Employee Management System login.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be launched remotely. T...

CVE-2024-1009 SourceCodester Employee Management System login.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be launched remotely. T...

CVE-2024-1008

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Profile Page. The manipulation leads to unrestricted upload. The attack can be...

CVE-2024-1007

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editprofile.php. The manipulation of the argument txtfullname leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2024-1008

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Profile Page. The manipulation leads to unrestricted upload. The attack can be...

Out-of-bounds

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Profile Page. The manipulation leads to unrestricted upload. The attack can be...

Sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editprofile.php. The manipulation of the argument txtfullname leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2024-1008

CVE-2024-1008 affects SourceCodester Employee Management System 1.0 (Profile Page, edit-photo.php). The vulnerability is described as an unrestricted upload flaw in that PHP file, allowing remote exploitation. Exploit has been publicly disclosed per the record, indicating potential active abuse. ...

CVE-2024-1008 SourceCodester Employee Management System Profile Page edit-photo.php unrestricted upload

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Profile Page. The manipulation leads to unrestricted upload. The attack can be...

CVE-2024-1008 SourceCodester Employee Management System Profile Page edit-photo.php unrestricted upload

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Profile Page. The manipulation leads to unrestricted upload. The attack can be...

CVE-2024-1007 SourceCodester Employee Management System edit_profile.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editprofile.php. The manipulation of the argument txtfullname leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2024-1007 SourceCodester Employee Management System edit_profile.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editprofile.php. The manipulation of the argument txtfullname leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2024-1007

SourceCodester Employee Management System 1.0 is affected by a SQL injection in the edit_profile.php function, triggered by manipulating the txtfullname parameter. The vulnerability enables remote exploitation and has publicly disclosed exploits, with CVE-2024-1007 identified across multiple sour...

SourceCodester Employee Management System Code Issue Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A code issue exists in version 1.0 of the SourceCodester Employee Management System, which is caused by an unrestricted file upload in edit-photo.php...

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A SQL injection vulnerability exists in SourceCodester Employee Management System version 1.0, which is caused by a sql injection in the txtusername parameter of...

SourceCodester Employee Management System Cross-Site Scripting Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from cross-site scripting due to incorrect...