CVE-2024-25239

SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyeeakpoly/Account/login.php...

CVE-2024-25239

Sourcecodester Employee Management System v1.0 is affected by a SQL Injection vulnerability exploitable via a crafted POST to /emloyee_akpoly/Account/login.php, enabling attackers to execute arbitrary SQL commands. The root cause is improper input handling in the login endpoint, with high impact ...