CVE-2024-25325

SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail parameter in the login.php...

CVE-2024-25325

The Employee Management System v.1.0 is vulnerable to an SQL injection flaw in the login.php endpoint. A local attacker can use a crafted payload directed at the txtemail parameter to obtain sensitive information or potentially manipulate data. As of the provided documentation, no patched version...