SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is SourceCodester open source php-based system for employee performance management . SourceCodester Employee Management System version 1.0 there is an injection vulnerability , the vulnerability stems from /Account/login.php in the existence of some unkno...

PT-2024-18348

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Management System version 1.0 Description A critical issue was found in the system, affecting some unknown functionality of the file /Account/login.php. The manipulation of the txtusername argument leads to sql injectio...

Employee Management System Security Vulnerability

Employee Management System is an employee management system. A security vulnerability exists in Employee Management System version v.1.0. An attacker can exploit this vulnerability to perform SQL injection attacks...

CVE-2024-25214

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

CVE-2024-25216

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...

CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2024-25212

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...

CVE-2024-25216

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

CVE-2024-25212

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

CVE-2024-25214

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

Authentication flaw

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

Sql injection

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

Sql injection

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

Sql injection

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. Employee Managment System v1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /aprocess.php...

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

PT-2024-20824 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: An issue in the Employee Managment System allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at the "/alogin.html" API endpoint...

CVE-2024-25216

CVE-2024-25216 affects the Employee Management System v1.0. A SQL injection vulnerability exists via the mailud parameter in /aprocess.php. The CVSS v3.1 score is 9.8 (CRITICAL) with impacts to confidentiality, integrity, and availability. Exploit details are not provided in the connected documen...