3165 matches found
Sql injection
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...
CVE-2024-25212
CVE-2024-25212 – SQL injection in Employee Management System v1.0 affects the delete.php endpoint, exploitable via the id parameter. The vulnerability is confirmed to enable SQL injection with an attack vector described as network access, requiring no user interaction, and with high impact on con...
CVE-2024-25215: Improper Neutralization of Special Elements used in an SQL Command
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...
CVE-2024-25214: Improper Neutralization of Special Elements used in an SQL Command
An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...
Employee Managment System SQL Injection Vulnerability
Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0, which originates from a SQL injection vulnerability in the file /edit.php...
CVE-2024-25212
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...
CVE-2024-25214
An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...
CVE-2024-25214
An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...
CVE-2024-25215
CVE-2024-25215 affects Employee Management System v1.0, vulnerable via the pwd parameter in /aprocess.php to a SQL injection. Root cause: improper input handling enabling unauthenticated network access with high impact on confidentiality, integrity, and availability. Connected docs mention remedi...
Employee Managment System SQL Injection Vulnerability
Employee Managment System is an employee management system. Employee Managment System v1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /aprocess.php...
CVE-2024-25215
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...
CVE-2024-25214
CVE-2024-25214 affects the Employee Managment System v1.0. The issue allows authentication bypass by injecting a crafted payload into the E-mail and Password parameters at the /alogin.html endpoint. Public reports consistently describe a critical impact (C/H/I/A) with network access and no user i...
CVE-2024-25212
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...
CVE-2024-25213
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...
CVE-2024-25213: Improper Neutralization of Special Elements used in an SQL Command
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...
CVE-2024-25216: Improper Neutralization of Special Elements used in an SQL Command
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...
CVE-2024-25216
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...
PT-2024-20823 · Unknown · Employee Management System
Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/edit.php" API endpoint. Recommendations: For Employee Managment System...
CVE-2024-25213
CVE-2024-25213 affects the Employee Management System v1.0, where a SQL injection vulnerability exists in the SQL query executed via the id parameter on the endpoint /edit.php . The root cause is a lack of proper input handling leading to possible data disclosure, modification, or corruption; the...