Lucene search
+L

3258 matches found

CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•16 views

Employee Management System SQL注入漏洞

Employee Management System is an employee management system by Mayuri K Individual Developer. A SQL injection vulnerability exists in Employee Management System version 192.168.70.3 and prior versions, which stems from an incorrect manipulation of the parameter id that can lead to SQL injection...

9.8CVSS7AI score0.00524EPSS
SaveExploits2References3
OSV
OSV
•added 2025/02/10 11:15 p.m.•23 views

CVE-2025-1160

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...

9.8CVSS5.5AI score0.00934EPSS
SaveExploits1References5
NVD
NVD
•added 2025/02/10 11:15 p.m.•23 views

CVE-2025-1160

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...

9.8CVSS0.00934EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/02/10 10:31 p.m.•10 views

CVE-2025-1160 SourceCodester Employee Management System index.php default credentials

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...

7.5CVSS7.4AI score0.00934EPSS
SaveExploits1References5
CVE
CVE
•added 2025/02/10 10:31 p.m.•74 views

CVE-2025-1160

CVE-2025-1160 affects SourceCodester Employee Management System 1.0. The issue resides in index.php where manipulation of the username/password parameters leads to the use of default credentials. The vulnerability can be exploited remotely and is rated critical by NVD (various sources align on hi...

9.8CVSS7.2AI score0.00934EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/10 12:00 a.m.•12 views

PT-2025-6116 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue affects some unknown functionality of the file index.php, where the manipulation of the username and password arguments leads to the use of default credential...

9.8CVSS7.5AI score0.00934EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/02/10 12:00 a.m.•15 views

SAP Fiori 安全漏洞

SAP Fiori, a user experience UX design system for SAP applications from SAP, Germany, provides designers and developers with a set of tools and guidelines to quickly develop applications for any platform, delivering a consistent, innovative experience for creators and users. A security...

5.4CVSS6.2AI score0.00221EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/02/10 12:00 a.m.•13 views

SourceCodester Employee Management System 安全漏洞

SourceCodester Employee Management System is a SourceCodester open source php-based system for employee performance management. A security vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect operation of the username/password parameters tha...

9.8CVSS7.5AI score0.00934EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/10 12:00 a.m.•2 views

CVE-2025-1160: Use of Default Credentials

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...

9.8CVSS5.4AI score0.00934EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/06 2:18 a.m.•25 views

CVE-2025-0846

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/AdminLogin.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7.3AI score0.00516EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 2:17 a.m.•22 views

CVE-2025-0802

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...

8.1CVSS6.9AI score0.00587EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/06 2:15 a.m.•24 views

CVE-2025-0847

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated...

9.8CVSS7.4AI score0.00599EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:39 a.m.•19 views

CVE-2024-5675

Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35. This vulnerability could allow an attacker to execute arbitrary code, by injecting a malicious payload into the “ViewState” field...

10CVSS7.6AI score0.00637EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:16 a.m.•17 views

CVE-2024-5896

A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

9.8CVSS7.4AI score0.00682EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:38 a.m.•19 views

CVE-2024-1833

A vulnerability was found in SourceCodester Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /Account/login.php. The manipulation of the argument txtusername/txtphone leads to sql injection. The attack may be launched...

9.8CVSS7.3AI score0.00908EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:26 a.m.•16 views

CVE-2024-1876

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid with the input '+or+1%3d1%23 leads to sql injection. It is possible to launch the attack...

9.8CVSS7.4AI score0.00729EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:21 a.m.•19 views

CVE-2024-1009

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be launched remotely. T...

9.8CVSS9.7AI score0.0076EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 2:13 a.m.•16 views

CVE-2024-2571

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage-admin.php. The manipulation leads to execution after redirect. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.2AI score0.0103EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 2:12 a.m.•17 views

CVE-2024-2575

A vulnerability, which was classified as critical, has been found in SourceCodester Employee Task Management System 1.0. Affected by this issue is some unknown functionality of the file /task-details.php. The manipulation of the argument taskid leads to authorization bypass. The attack may be...

9.8CVSS6.9AI score0.00669EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 1:53 a.m.•25 views

CVE-2024-2572

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /task-details.php. The manipulation leads to execution after redirect. The attack may be initiated remotely. The exploit has been...

9.8CVSS7.1AI score0.0103EPSS
SaveExploits0References1
Rows per page
Query Builder