CVE-2024-25212

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...

CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

PT-2024-20822 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/delete.php" API endpoint. Recommendations: For Employee Managment Syst...

PT-2024-20823 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/edit.php" API endpoint. Recommendations: For Employee Managment System...

CVE-2024-25213: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2024-25212: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0, which originates from a SQL injection vulnerability in the file /delete.php...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0 that originates from allowing an attacker to bypass authentication by injecting a payload into the /alogin.html parameter...

PT-2024-20824 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: An issue in the Employee Managment System allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at the "/alogin.html" API endpoint...

PT-2024-20825 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: A SQL injection vulnerability was discovered in Employee Managment System via the pwd parameter at the "/aprocess.php" API endpoint. Recommendations: For Employee Managment System version 1.0...

CVE-2024-25216

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. Employee Managment System v1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /aprocess.php...

CVE-2024-25216

CVE-2024-25216 affects the Employee Management System v1.0. A SQL injection vulnerability exists via the mailud parameter in /aprocess.php. The CVSS v3.1 score is 9.8 (CRITICAL) with impacts to confidentiality, integrity, and availability. Exploit details are not provided in the connected documen...

Unrestricted file upload

Unrestricted File Upload vulnerability in Employee Management System 1.0 allows a remote attacker to execute arbitrary code via the edit-photo.php component...

Sql injection

SQL Injection vulnerability in Employee Management System v.1.0 allows a remote attacker to execute arbitrary SQL commands via the txtfullname and txtphone parameters in the editprofile.php component...

PT-2024-20424 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Management System version 1.0 Description: The issue allows a remote attacker to execute arbitrary SQL commands via the txtfullname and txtphone parameters in the "edit profile.php" component. Recommendations: For Employee Management...

Number withdrawn

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester, USA. The CVE number has been withdrawn...

PT-2024-20422 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Management System version 1.0 Description: The issue allows a remote attacker to execute arbitrary SQL commands via the txtusername and txtpassword parameters in the "login.php" component. This enables the attacker to manipulate the...