CVE-2025-45065: Improper Neutralization of Special Elements used in an SQL Command

employee record management system in php and mysql v1 was discovered to contain a SQL injection vulnerability via the loginerms.php endpoint...

CVE-2025-7126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. Affected by this issue is some unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminName leads to sql injection. The attack may be...

CVE-2025-7125: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched...

CVE-2025-45065

The PHPGurukul Employee Record Management System in PHP and MySQL v1 contains a SQL injection vulnerability within the loginerms.php endpoint. The root cause is a lack of measures to protect the SQL query structure , which allows attackers to inject malicious SQL code. Successful exploitation can...

The vulnerability of the adminprofile.php (/admin/adminprofile.php) script of the Employee Management System allows a hacker to execute arbitrary code.

The vulnerability of the adminprofile.php /admin/adminprofile.php script of the Employee Management System is related to the failure to eliminate special elements during the processing of the AdminName parameter. Exploiting this vulnerability allows an attacker operating remotely to execute...

PT-2025-28169 · Unknown · Campcodes Payroll Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Payroll Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /ajax.php?action=save employee attendance. The manipulation of the employee id argument lead...

The vulnerability in the editempeducation.php (/admin/editempeducation.php) script of the Employee Management System allows a perpetrator to execute arbitrary code.

The vulnerability of the editempeducation.php /admin/editempeducation.php script of the Employee Management System is related to the failure to remove special elements during the processing of the coursepg parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CampCodes Payroll Management System 注入漏洞

CampCodes Payroll Management System is a payroll management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Payroll Management System version 1.0, which stems from improper handling of the employeeid parameter in the file /ajax.php, which could lead to a SQL...

PHPGurukul Employee Record Management System in PHP and MySQL 安全漏洞

PHPGurukul Employee Record Management System in PHP and MySQL is a php and mysql based employee record management system from PHPGurukul. A security vulnerability exists in PHPGurukul Employee Record Management System in PHP and MySQL v1, which originates from a SQL injection vulnerability in the...

CVE-2025-7127: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack...

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is a itsourcecode open source employee management system. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from an improper handling of the parameter currentpassword in the file...

PT-2025-28184 · Unknown · Employee Record Management System

Name of the Vulnerable Software and Affected Versions: Employee Record Management System in PHP and MySQL version 1 Description: A SQL injection issue was found in the system via the "loginerms.php" endpoint. This allows for potential exploitation by injecting malicious SQL code. Recommendations:...

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is an open source employee management system from itsourcecode. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from an improper handling of the parameter AdminName in the file...

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is a itsourcecode open source employee management system. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from improper handling of the parameter coursepg in the file...

The vulnerability of the changepassword.php (/admin/changepassword.php) script of the Employee Management System allows a perpetrator to execute arbitrary code.

The vulnerability of the changepassword.php /admin/changepassword.php script of the Employee Management System is related to the failure to remove special elements during the processing of the currentpassword parameter. Exploiting this vulnerability allows an attacker operating remotely to execut...

Simplify Onboarding With Hospitality Training Software

Effective onboarding is essential in fast-paced hospitality, with high turnover rates and a multitude of expectations as the…...

CVE-2025-5956

The WP Human Resource Management plugin for WordPress is vulnerable to Arbitrary User Deletion due to a missing authorization within the ajaxdeleteemployee function in versions 2.0.0 through 2.2.17. The plugin’s deletion handler reads the client-supplied $POST'delete' array and passes each ID...

CVE-2025-5953 WP Human Resource Management 2.0.0 - 2.2.17 - Missing Authorization to Authenticated (Employee+) Privilege Escalation via wp_ajax_hrm_insert_employee AJAX Action

The WP Human Resource Management plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the ajaxinsertemployee and updateempoyee functions in versions 2.0.0 through 2.2.17. The AJAX handler reads the client-supplied $POST'role' and, after basic cleaning via...

CVE-2025-6961

A vulnerability, which was classified as critical, has been found in Campcodes Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /mark.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2025-6963

A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /myprofile.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...