CVE-2026-9451

Summary (CVE-2026-9451): Code-Projects Employee Management System 1.0 contains a vulnerability in the /process/applyleaveprocess.php handling of the ID parameter, enabling SQL injection. The issue is remote and has PoC exploitation notes in the entry. The CVSS-derived metrics indicate a medium se...

CVE-2026-9451

A weakness has been identified in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /process/applyleaveprocess.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has...

CVE-2026-9451: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /process/applyleaveprocess.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has...

PT-2026-43038

A weakness has been identified in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /process/applyleaveprocess.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has...