Lucene search
+L

734 matches found

Positive Technologies
Positive Technologies
added 2024/01/29 12:00 a.m.8 views

PT-2024-16013 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue was found in the Profile Page component, specifically in the file edit-photo.php, allowing for unrestricted upload. This can be exploited remotely...

7.2CVSS7.3AI score0.00751EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/01/29 12:00 a.m.8 views

SourceCodester Employee Management System Access Control Error Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. An Access Control Error vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from incorrect manipulation of the parameter id that...

8.8CVSS6.8AI score0.00638EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/01/29 12:00 a.m.16 views

PT-2024-16026 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A problematic vulnerability has been found in the system, affecting the edit-profile.php file. The issue arises from the manipulation of the fullname, phone, date of birth,...

5.4CVSS4.1AI score0.00575EPSS
SaveExploits1References4
Packet Storm
Packet Storm
added 2024/01/24 12:00 a.m.415 views

Employee Management System 1.0 SQL Injection

Exploit Title: Employee Management System - SQLi Date: 23/03/2024 Exploit Author: Özlem Balcı Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Software Download:...

7.4AI score
SaveExploits0
CNNVD
CNNVD
added 2022/10/28 12:00 a.m.22 views

Employee Record Management System 跨站脚本漏洞

PHPGurukul Phpgurukul Employee Record Management System is an Employee Record Management System from PHPGurukul, Inc. A cross-site scripting vulnerability exists in Employee Record Management System version 1.2, which stems from a cross-site scripting issue in editempprofile.php...

5.4CVSS5.4AI score0.0043EPSS
SaveExploits1References3
NVD
NVD
added 2022/09/05 2:15 p.m.15 views

CVE-2022-3121

A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The attack can be...

8.8CVSS0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/05 12:00 a.m.8 views

PT-2022-20610 · Sourcecodester · Sourcecodester Online Employee Leave Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Employee Leave Management System version 1.0 Description: A vulnerability was found in the system, affecting an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request...

8.8CVSS8.5AI score0.00246EPSS
SaveExploits0References4
NVD
NVD
added 2022/08/09 7:15 a.m.34 views

CVE-2022-2724

A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be launched...

9.8CVSS0.00961EPSS
SaveExploits1References2
NVD
NVD
added 2022/08/09 7:15 a.m.20 views

CVE-2022-2723

A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is an unknown function of the file /process/eprocess.php. The manipulation of the argument mailuid/pwd leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS0.00961EPSS
SaveExploits1References2
NVD
NVD
added 2022/08/09 7:15 a.m.29 views

CVE-2022-2715

A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file eloginwel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

9.8CVSS0.00829EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/09 7:15 a.m.16 views

Sql injection

A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is an unknown function of the file /process/eprocess.php. The manipulation of the argument mailuid/pwd leads to sql injection. It is possible to launch the attack remotely. The...

7.5CVSS9.7AI score0.00961EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/09 7:15 a.m.18 views

Sql injection

A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be launched...

7.5CVSS9.7AI score0.00961EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/09 7:10 a.m.66 views

CVE-2022-2724

CVE-2022-2724 affects SourceCodester Entity Employee Management System via an SQL injection in /process/aprocess.php, triggered by modifying the mailuid parameter. Attacks are remote and exploits have been publicly disclosed. Public sources concur on a critical/high impact across confidentiality,...

9.8CVSS8.3AI score0.00961EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/08/09 7:10 a.m.33 views

CVE-2022-2724 SourceCodester Employee Management System aprocess.php sql injection

A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be launched...

6.3CVSS10AI score0.00961EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/08/09 7:10 a.m.27 views

CVE-2022-2723 SourceCodester Employee Management System eprocess.php sql injection

A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is an unknown function of the file /process/eprocess.php. The manipulation of the argument mailuid/pwd leads to sql injection. It is possible to launch the attack remotely. The...

6.3CVSS10AI score0.00961EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/09 7:10 a.m.61 views

CVE-2022-2723

CVE-2022-2723 affects SourceCodester Employee Management System, with a vulnerability in the unknown function under /process/eprocess.php. The issue arises from manipulating the mailuid/pwd parameter, leading to SQL injection. This vulnerability is described as remote-exploitable and is classifie...

9.8CVSS8.4AI score0.00961EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/08/09 6:50 a.m.62 views

CVE-2022-2715

CVE-2022-2715 affects SourceCodester Employee Management System; the eloginwel.php file has a flaw where manipulating the id parameter enables SQL injection. The vulnerability can be exploited remotely and the exploit has been disclosed publicly (VDB-205834). Based on the provided documents, ther...

9.8CVSS8.4AI score0.00829EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/08/09 6:50 a.m.44 views

CVE-2022-2715 SourceCodester Employee Management System eloginwel.php sql injection

A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file eloginwel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

6.3CVSS10AI score0.00829EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/09 12:00 a.m.7 views

Employee Management System SQL注入漏洞

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. The Employee Management System suffers from a SQL injection vulnerability that stems from unknown code in the file eloginwel.php being affected, where manipulation of...

9.8CVSS8.2AI score0.00829EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/08/09 12:00 a.m.6 views

Employee Management System SQL注入漏洞

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. Employee Management System suffers from a SQL injection vulnerability that originates from an affected unknown function in the file /process/eprocess.php, where...

9.8CVSS8.2AI score0.00961EPSS
SaveExploits1References3
Rows per page
Query Builder