Lucene search
K

36 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:13 a.m.6 views

CVE-2024-2394

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/add-admin.php. The manipulation of the argument avatar leads to unrestricted upload. The attack may be launched...

9.8CVSS6.9AI score0.00122EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4403

Malicious code in bioql PyPI...

6.1CVSS4AI score0.00097EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-17558

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00171EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-16784

Malicious code in bioql PyPI...

7.2CVSS6.7AI score0.00062EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4405

Malicious code in bioql PyPI...

9.8CVSS5AI score0.00029EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-34957

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.0031EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-17596

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00102EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 9:39 a.m.6 views

CVE-2024-1007

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editprofile.php. The manipulation of the argument txtfullname leads to sql injection. It is possible to launch the attack remotely. The explo...

7.2CVSS7.3AI score0.00062EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:1 a.m.6 views

CVE-2022-2715

A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file eloginwel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

9.8CVSS7.6AI score0.0031EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/03/04 4:31 a.m.12 views

CVE-2025-1905 SourceCodester Employee Management System employee.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.1CVSS0.00268EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/02/24 12:31 a.m.18 views

CVE-2025-1607 SourceCodester Best Employee Management System salary_slip.php authorization

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

5.3CVSS0.00093EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/02/23 7:0 p.m.11 views

CVE-2025-1591 SourceCodester Employee Management System Department Page department.php cross site scripting

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

4.8CVSS6.3AI score0.00097EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/02/23 7:0 p.m.10 views

CVE-2025-1591 SourceCodester Employee Management System Department Page department.php cross site scripting

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

4.8CVSS0.00097EPSS
Exploits0References4
CVE
CVE
added 2025/02/23 7:0 p.m.61 views

CVE-2025-1591

CVE-2025-1591 affects SourceCodester Employee Management System 1.0, specifically the Department Page component. The vulnerability resides in /department.php where manipulating the Department Name parameter leads to cross-site scripting. The attack is described as remote. Connected sources corrob...

6.1CVSS3.5AI score0.00097EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2025/02/10 12:0 a.m.3 views

SourceCodester Employee Management System 安全漏洞

SourceCodester Employee Management System is a SourceCodester open source php-based system for employee performance management. A security vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect operation of the username/password parameters tha...

9.8CVSS7.5AI score0.00127EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/09/22 8:31 a.m.22 views

CVE-2024-9083 SourceCodester Employee Management System add-admin.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file /Admin/add-admin.php. The manipulation of the argument txtfullname leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.1CVSS0.00079EPSS
Exploits1References5
OSV
OSV
added 2024/03/12 3:15 p.m.1 views

CVE-2024-2394

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/add-admin.php. The manipulation of the argument avatar leads to unrestricted upload. The attack may be launched...

9.8CVSS5.5AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/12 2:31 p.m.16 views

CVE-2024-2394 SourceCodester Employee Management System add-admin.php unrestricted upload

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/add-admin.php. The manipulation of the argument avatar leads to unrestricted upload. The attack may be launched...

5.8CVSS6.9AI score0.00122EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/02/29 12:0 a.m.11 views

CVE-2024-25239

SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyeeakpoly/Account/login.php...

9.9AI score0.00131EPSS
Exploits1References1
NVD
NVD
added 2024/02/26 4:27 p.m.14 views

CVE-2024-1877

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cancel.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack can ...

8.8CVSS6.8AI score0.00045EPSS
Exploits0References3
Rows per page
Query Builder