CVE-2025-11112: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument First name leads to cross site scripting. The attack can be launched remotely. The exploit has been...

PT-2025-39783

Name of the Vulnerable Software and Affected Versions PHPGurukul Employee Record Management System version 1.3 Description A security issue exists in PHPGurukul Employee Record Management System version 1.3. Manipulation of the First name argument in the /myprofile.php file can lead to cross site...

PT-2025-39753

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A SQL injection issue exists due to the manipulation of the ID argument. This affects an unknown function within the file '/admin/employee/index.php?view=edit'. The attack can be...

CVE-2025-11090: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected is an unknown function of the file /admin/employee/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might...

CVE-2025-11030

A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60. Impacted is an unknown function of the file /admin/all-applied-leave.php of the component HTTP Request Handler. The manipulation results in improper authorization. The atta...

CVE-2025-26258

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting XSS via 'Add Designation.'...

CVE-2025-26258

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting XSS via 'Add Designation.'...

CVE-2025-26258

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting XSS via 'Add Designation.'...

CVE-2025-11030

A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60. Impacted is an unknown function of the file /admin/all-applied-leave.php of the component HTTP Request Handler. The manipulation results in improper authorization. The atta...

CVE-2025-11030 Tutorials-Website Employee Management System HTTP Request all-applied-leave.php improper authorization

A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60. Impacted is an unknown function of the file /admin/all-applied-leave.php of the component HTTP Request Handler. The manipulation results in improper authorization. The atta...

CVE-2025-11030

CVE-2025-11030 affects Tutorials-Website Employee Management System, specifically the /admin/all-applied-leave.php HTTP Request Handler. Root cause: improper authorization enabling remote abuse; exploit publicly available. Version info not disclosed due to rolling releases; remediation guidance a...

CVE-2025-11030 Tutorials-Website Employee Management System HTTP Request all-applied-leave.php improper authorization

A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60. Impacted is an unknown function of the file /admin/all-applied-leave.php of the component HTTP Request Handler. The manipulation results in improper authorization. The atta...

Sourcecodester Employee Management System 安全漏洞

SourceCodester Employee Management System is a SourceCodester open source php-based system for employee performance management. A security vulnerability exists in Sourcecodester Employee Management System version 1.0, which originates from a cross-site scripting vulnerability in the Add Designati...

CVE-2025-26258

The Sourcecodester Employee Management System v1.0 (a PHP-based system for employee performance management) is vulnerable to Cross Site Scripting (XSS) . The flaw exists within the 'Add Designation' functionality because the application fails to properly sanitize user-supplied data. This allows a...

PT-2025-39660

Name of the Vulnerable Software and Affected Versions Sourcecodester Employee Management System version 1.0 Description The software is susceptible to Cross Site Scripting XSS attacks. The vulnerability is located in the 'Add Designation' functionality. The Add Designation feature does not proper...

Tutorials Website Employee Management System 授权问题漏洞

Tutorials Website Employee Management System is an employee management system from Tutorials Website, Inc. Tutorials Website Employee Management System has an authorization issue vulnerability that stems from improper authorization of the HTTP request processing component in file...

CVE-2025-11030: Improper Authorization

A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60. Impacted is an unknown function of the file /admin/all-applied-leave.php of the component HTTP Request Handler. The manipulation results in improper authorization. The atta...

CVE-2025-26258

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting XSS via 'Add Designation.'...

CVE-2025-26258

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting XSS via 'Add Designation.'...

CVE-2025-26258: Improper Neutralization of Input During Web Page Generation

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting XSS via 'Add Designation.'...