CVE-2025-7125

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched...

CVE-2025-7125 itsourcecode Employee Management System editempeducation.php sql injection

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched...

CVE-2025-7125 itsourcecode Employee Management System editempeducation.php sql injection

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched...

CVE-2025-7125

The CVE-2025-7125 entry concerns the itsourcecode Employee Management System (up to version 1.0). The vulnerability stems from improper handling of the coursepg parameter in the file /admin/editempeducation.php, enabling a SQL injection. It is exploitable remotely, and public exploit information ...

PT-2025-28184 · Unknown · Employee Record Management System

Name of the Vulnerable Software and Affected Versions: Employee Record Management System in PHP and MySQL version 1 Description: A SQL injection issue was found in the system via the "loginerms.php" endpoint. This allows for potential exploitation by injecting malicious SQL code. Recommendations:...

The vulnerability of the changepassword.php (/admin/changepassword.php) script of the Employee Management System allows a perpetrator to execute arbitrary code.

The vulnerability of the changepassword.php /admin/changepassword.php script of the Employee Management System is related to the failure to remove special elements during the processing of the currentpassword parameter. Exploiting this vulnerability allows an attacker operating remotely to execut...

The vulnerability in the editempeducation.php (/admin/editempeducation.php) script of the Employee Management System allows a perpetrator to execute arbitrary code.

The vulnerability of the editempeducation.php /admin/editempeducation.php script of the Employee Management System is related to the failure to remove special elements during the processing of the coursepg parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the adminprofile.php (/admin/adminprofile.php) script of the Employee Management System allows a hacker to execute arbitrary code.

The vulnerability of the adminprofile.php /admin/adminprofile.php script of the Employee Management System is related to the failure to eliminate special elements during the processing of the AdminName parameter. Exploiting this vulnerability allows an attacker operating remotely to execute...

CVE-2025-7127: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack...

CVE-2025-45065

employee record management system in php and mysql v1 was discovered to contain a SQL injection vulnerability via the loginerms.php endpoint...

CVE-2025-7126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. Affected by this issue is some unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminName leads to sql injection. The attack may be...

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is an open source employee management system from itsourcecode. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from an improper handling of the parameter AdminName in the file...

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is a itsourcecode open source employee management system. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from an improper handling of the parameter currentpassword in the file...

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is a itsourcecode open source employee management system. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from improper handling of the parameter coursepg in the file...

CVE-2025-7125: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched...

PHPGurukul Employee Record Management System in PHP and MySQL 安全漏洞

PHPGurukul Employee Record Management System in PHP and MySQL is a php and mysql based employee record management system from PHPGurukul. A security vulnerability exists in PHPGurukul Employee Record Management System in PHP and MySQL v1, which originates from a SQL injection vulnerability in the...

PT-2025-28169 · Unknown · Campcodes Payroll Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Payroll Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /ajax.php?action=save employee attendance. The manipulation of the employee id argument lead...

CampCodes Payroll Management System 注入漏洞

CampCodes Payroll Management System is a payroll management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Payroll Management System version 1.0, which stems from improper handling of the employeeid parameter in the file /ajax.php, which could lead to a SQL...

CVE-2025-45065: Improper Neutralization of Special Elements used in an SQL Command

employee record management system in php and mysql v1 was discovered to contain a SQL injection vulnerability via the loginerms.php endpoint...

CVE-2025-45065

The PHPGurukul Employee Record Management System in PHP and MySQL v1 contains a SQL injection vulnerability within the loginerms.php endpoint. The root cause is a lack of measures to protect the SQL query structure , which allows attackers to inject malicious SQL code. Successful exploitation can...