Cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpositionquery.php. The manipulation of the argument posname leads to cross site scripting. It is possible to launch the attack...

CVE-2024-0467 code-projects Employee Profile Management System edit_position_query.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpositionquery.php. The manipulation of the argument posname leads to cross site scripting. It is possible to launch the attack...

CVE-2024-0467

The CVE-2024-0467 entry concerns code-projects’ Employee Profile Management System 1.0. The vulnerability affects the edit_position_query.php function, where manipulating the pos_name argument enables cross-site scripting (XSS). It is described as exploitable remotely, with the exploit disclosed ...

CVE-2024-0467 code-projects Employee Profile Management System edit_position_query.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpositionquery.php. The manipulation of the argument posname leads to cross site scripting. It is possible to launch the attack...

CVE-2024-0465

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument downloadfile leads to path traversal: '../filedir'. The exploit has been disclosed to the...

CVE-2024-0465

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument downloadfile leads to path traversal: '../filedir'. The exploit has been disclosed to the...

CVE-2024-0466

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file filetable.php. The manipulation of the argument perid leads to sql injection. The exploit has been disclosed to the...

CVE-2024-0466

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file filetable.php. The manipulation of the argument perid leads to sql injection. The exploit has been disclosed to the...

Path traversal

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument downloadfile leads to path traversal: '../filedir'. The exploit has been disclosed to the...

Sql injection

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file filetable.php. The manipulation of the argument perid leads to sql injection. The exploit has been disclosed to the...

CVE-2024-0466

The CVE-2024-0466 entry covers code-projects Employee Profile Management System 1.0 with a SQL injection in file_table.php via the per_id argument. Root cause: unsafely processed per_id leads to injection risk. Impact: potential unauthorized data access/modify across the application (as described...

CVE-2024-0466 code-projects Employee Profile Management System file_table.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file filetable.php. The manipulation of the argument perid leads to sql injection. The exploit has been disclosed to the...

CVE-2024-0466 code-projects Employee Profile Management System file_table.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file filetable.php. The manipulation of the argument perid leads to sql injection. The exploit has been disclosed to the...

CVE-2024-0465 code-projects Employee Profile Management System download.php path traversal

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument downloadfile leads to path traversal: '../filedir'. The exploit has been disclosed to the...

CVE-2024-0465 code-projects Employee Profile Management System download.php path traversal

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument downloadfile leads to path traversal: '../filedir'. The exploit has been disclosed to the...

CVE-2024-0465

CVE-2024-0465 affects code-projects Employee Profile Management System 1.0, with the vulnerable path in the file download.php . The vulnerability stems from manipulating the download_file argument, enabling a path traversal to “../filedir”. Public disclosure of the exploit is noted. Several conne...

Employee Profile Management System Cross-Site Scripting Vulnerability

Employee Profile Management System is an employee profile management system by the individual developer Carmelo Garcia. A cross-site scripting vulnerability exists in code-projects Employee Profile Management System version 1.0, which stems from an SQL injection vulnerability in the...

PT-2024-15582 · Code Projects · Code-Projects Employee Profile Management System

Name of the Vulnerable Software and Affected Versions: code-projects Employee Profile Management System version 1.0 Description: A problematic vulnerability was found in the code-projects Employee Profile Management System. This issue affects the file download.php, where the manipulation of the...

Employee Profile Management System SQL Injection Vulnerability

Employee Profile Management System is an employee profile management system by Carmelo Garcia, an individual developer. An SQL injection vulnerability exists in Employee Profile Management System version 1.0, which stems from an SQL injection vulnerability in the filetable.php file...

Employee Profile Management System Security Vulnerability

Employee Profile Management System is an employee profile management system by Carmelo Garcia, an individual developer. A security vulnerability exists in Employee Profile Management System version 1.0, which is caused by a path traversal vulnerability in the download.php file...