CVE-2025-0847

The CVE-2025-0847 entry concerns 1000 Projects Employee Task Management System 1.0. The vulnerability resides in the Login component, specifically the /index.php file, where manipulating the email parameter enables SQL injection. This can be exploited remotely, and public exploitation is indicate...

CVE-2025-0847 1000 Projects Employee Task Management System Login index.php sql injection

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated...

CVE-2025-0846

The CVE-2025-0846 vulnerability affects 1000 Projects Employee Task Management System v1.0, specifically in /admin/AdminLogin.php where the email parameter is susceptible to SQL injection. Attackers can remotely exploit this flaw, and public disclosures exist. Multiple feeds (NVD, Red Hat, CVE re...

CVE-2025-0847: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated...

1000 Projects Employee Task Management System SQL注入漏洞

1000 Projects Employee Task Management System is an open source employee task management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Employee Task Management System version 1.0, which is caused by SQL injection due to parameter email...

CVE-2025-0846: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/AdminLogin.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-33247

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

PT-2024-25167 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Task Management System version 1.0 Description: The issue allows for SQL Injection via the admin-manage-user.php page. Recommendations: For Employee Task Management System version 1.0, consider restricting access to the...

CVE-2024-33247

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

CVE-2024-33247

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

CVE-2024-33247

CVE-2024-33247 affects Sourcecodester Employee Task Management System v1.0, with a SQL injection vulnerability in the file/admin page admin-manage-user.php. The vulnerability is documented across multiple sources and targets the admin input handling, but the connected documents provide no public ...

CVE-2024-33247: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

Employee Task Management System in PHP/PDO Free Source Code - admin-manage-user.php SQL injection vulnerability

NAME OF AFFECTED PRODUCTS + Employee Task Management System...

CVE-2024-2577

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

CVE-2024-2577 SourceCodester Employee Task Management System update-employee.php authorization

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

CVE-2024-2577

SourceCodester SourceCodeSter Employee Task Management System 1.0 is affected by a critical vulnerability in the /update-employee.php file. The issue stems from manipulating the admin_id parameter, causing an authorization bypass. The vulnerability is described as exploitable remotely and disclos...

CVE-2024-2577 SourceCodester Employee Task Management System update-employee.php authorization

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

CVE-2024-2574

A vulnerability classified as critical was found in SourceCodester Employee Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit-task.php. The manipulation of the argument taskid leads to authorization bypass. The attack can be launched remotely...

CVE-2024-2575

A vulnerability, which was classified as critical, has been found in SourceCodester Employee Task Management System 1.0. Affected by this issue is some unknown functionality of the file /task-details.php. The manipulation of the argument taskid leads to authorization bypass. The attack may be...

CVE-2024-2576

A vulnerability, which was classified as critical, was found in SourceCodester Employee Task Management System 1.0. This affects an unknown part of the file /update-admin.php. The manipulation of the argument adminid leads to authorization bypass. It is possible to initiate the attack remotely. T...