Lucene search
+L

3258 matches found

Vulnrichment
Vulnrichment
•added 2025/05/26 11:00 p.m.•13 views

CVE-2025-5211 PHPGurukul Employee Record Management System myprofile.php sql injection

A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This issue affects some unknown processing of the file /myprofile.php. The manipulation of the argument EmpCode leads to sql injection. The attack may be initiated remotely. The exploit has...

7.5CVSS7.4AI score0.00488EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/26 10:31 p.m.•11 views

CVE-2025-5210 PHPGurukul Employee Record Management System loginerms.php sql injection

A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the file /loginerms.php. The manipulation of the argument Email leads to sql injection. The attack can be initiated remotely. The exploit has...

7.5CVSS7.5AI score0.00488EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/26 10:31 p.m.•69 views

CVE-2025-5210

CVE-2025-5210 affects PHPGurukul Employee Record Management System v1.3. The issue resides in the /loginerms.php file, where the input parameter Email can be manipulated to perform a SQL injection. Exploitation is possible remotely, and multiple connected sources confirm the vulnerability with hi...

9.8CVSS7.5AI score0.00488EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/05/26 12:00 a.m.•19 views

PT-2025-22939 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue has been found in the PHPGurukul Employee Record Management System. This issue affects the file /loginerms.php and is related to SQL injection. The...

9.8CVSS7.6AI score0.00488EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2025/05/26 12:00 a.m.•34 views

PT-2025-22941 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue was found in the PHPGurukul Employee Record Management System. The problem affects an unknown function of the file /admin/editempexp.php. Manipulation of t...

9.8CVSS7.5AI score0.00488EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2025/05/26 12:00 a.m.•28 views

PT-2025-22940 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.3 Description: A critical issue affects the processing of the file /myprofile.php, where the manipulation of the EmpCode argument leads to SQL injection. The attack can be initiated...

9.8CVSS7.6AI score0.00488EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/26 12:00 a.m.•3 views

CVE-2025-5211: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This issue affects some unknown processing of the file /myprofile.php. The manipulation of the argument EmpCode leads to sql injection. The attack may be initiated remotely. The exploit has...

9.8CVSS7AI score0.00488EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/26 12:00 a.m.•5 views

CVE-2025-5212: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been classified as critical. Affected is an unknown function of the file /admin/editempexp.php. The manipulation of the argument emp1name leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS6.9AI score0.00488EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/26 12:00 a.m.•7 views

CVE-2025-5210: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the file /loginerms.php. The manipulation of the argument Email leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS6.9AI score0.00488EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/26 12:00 a.m.•18 views

PHPGurukul Employee Record Management System 注入漏洞

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter emp1name in the file /admin/editempexp.php. An...

9.8CVSS8.2AI score0.00488EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/26 12:00 a.m.•25 views

PHPGurukul Employee Record Management System 注入漏洞

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter EmpCode in the file /myprofile.php. An attacker...

9.8CVSS8.2AI score0.00488EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/26 12:00 a.m.•15 views

PHPGurukul Employee Record Management System 注入漏洞

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Email in the file /loginerms.php. An attacker c...

9.8CVSS8.2AI score0.00488EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/05/23 10:43 a.m.•20 views

CVE-2024-48813

SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via the adminid parameter of the /update-employee.php component...

8.8CVSS8.7AI score0.00669EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:20 a.m.•25 views

CVE-2024-33247

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

8.8CVSS8.1AI score0.00669EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:01 a.m.•17 views

CVE-2024-25325

SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail parameter in the login.php...

7.1CVSS7AI score0.00282EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:55 a.m.•15 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

9.8CVSS8.2AI score0.01229EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:46 a.m.•20 views

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

9.8CVSS8.3AI score0.00733EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:46 a.m.•20 views

CVE-2024-25239

SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyeeakpoly/Account/login.php...

9.8CVSS9.8AI score0.00785EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:46 a.m.•18 views

CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

7.2CVSS8.3AI score0.00716EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:45 a.m.•17 views

CVE-2024-25214

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

9.8CVSS7.1AI score0.00979EPSS
SaveExploits1References1
Rows per page
Query Builder