CVE-2025-14194

A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file /viewpersonnel.php. The manipulation of the argument peraddress/drschool/otherschool leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-14195 code-projects Employee Profile Management System add_file_query.php unrestricted upload

A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown function of the file /profiling/addfilequery.php. The manipulation of the argument perfile results in unrestricted upload. The attack may be launched remotely. The exploit has been...

CVE-2025-14195

CVE-2025-14195 affects code-projects Employee Profile Management System 1.0. The vulnerability is tied to the per_file parameter in /profiling/add_file_query.php, where improper validation allows unrestricted file upload. This could enable remote attackers to upload arbitrary files. The exploit i...

CVE-2025-14195

A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown function of the file /profiling/addfilequery.php. The manipulation of the argument perfile results in unrestricted upload. The attack may be launched remotely. The exploit has been...

CVE-2025-14194 code-projects Employee Profile Management System view_personnel.php cross site scripting

A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file /viewpersonnel.php. The manipulation of the argument peraddress/drschool/otherschool leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-14194 code-projects Employee Profile Management System view_personnel.php cross site scripting

A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file /viewpersonnel.php. The manipulation of the argument peraddress/drschool/otherschool leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-14193

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /viewpersonnel.php. Executing a manipulation of the argument perid can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-14193

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /viewpersonnel.php. Executing a manipulation of the argument perid can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-14193 code-projects Employee Profile Management System view_personnel.php sql injection

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /viewpersonnel.php. Executing a manipulation of the argument perid can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-14193 code-projects Employee Profile Management System view_personnel.php sql injection

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /viewpersonnel.php. Executing a manipulation of the argument perid can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-14193

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /viewpersonnel.php. Executing a manipulation of the argument perid can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-14193

The CVE-2025-14193 detail concerns code-projects’ Employee Profile Management System 1.0. Multiple connected sources confirm a SQL injection vulnerability in the file /view_personnel.php, arising from unvalidated input in the per_id parameter. This enables remote exploitation and data disclosure,...

CVE-2025-65271

creationtimestamp| type| source ---|---|--- 2025-12-07 11:54:13+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/62029 2025-12-07 15:00:06+00:00| published-proof-of-concept| Telegram/SMKYXiw5wY8oNgtGYQViKcUduDM9Fp0iSW-axRtzlO4bR5E 2025-12-08 23:10:06+00:00| seen|...

CVE-2025-14186

creationtimestamp| type| source ---|---|--- 2025-12-07 09:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7f6rsjzpi2s...

CVE-2025-14187

creationtimestamp| type| source ---|---|--- 2025-12-07 09:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7f6iu4pzd26 2025-12-07 10:03:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/115677713203587256 2025-12-07 10:03:48+00:00| seen|...

CVE-2024-38945

creationtimestamp| type| source ---|---|--- 2025-12-07 03:56:23+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m7emopzezw2h...

CVE-2025-40283

creationtimestamp| type| source ---|---|--- 2025-12-07 00:07:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7e7v4kxov2s 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

PT-2025-49419

A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membership profile.php of the component Your Info Handler. Performing manipulation of the argument Full Name/Address/City/State results in cross site...

Code-Projects Employee Profile Management System SQL注入漏洞

Employee Profile Management System is an employee profile management system. The Employee Profile Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter perid in the file /viewpersonnel.php. An...

PT-2025-49406

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /view personnel.php. Executing manipulation of the argument per id can lead to sql injection. The attack can be launched remotely. The exploit has been...