2 matches found
CVE-2024-25239
Sourcecodester Employee Management System v1.0 is affected by a SQL Injection vulnerability exploitable via a crafted POST to /emloyee_akpoly/Account/login.php, enabling attackers to execute arbitrary SQL commands. The root cause is improper input handling in the login endpoint, with high impact ...
9.8CVSS8.2AI score0.00785EPSS
SaveExploits1References1Affected Software1
20