Lucene search
K

9 matches found

Cvelist
Cvelist
added 2025/06/25 3:0 p.m.8 views

CVE-2025-6610 itsourcecode Employee Management System editempprofile.php sql injection

A vulnerability was found in itsourcecode Employee Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/editempprofile.php. The manipulation of the argument FirstName leads to sql injection. It is possible to initiate the attack remotely...

5.8CVSS0.00186EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 8:7 p.m.6 views

CVE-2021-37781

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

5.4CVSS6AI score0.00548EPSS
Exploits1
NVD
NVD
added 2022/10/28 3:15 p.m.10 views

CVE-2021-37781

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

5.4CVSS0.00548EPSS
Exploits1References2
Prion
Prion
added 2022/10/28 3:15 p.m.22 views

Cross site scripting

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

4.9CVSS5.3AI score0.00548EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/10/28 12:0 a.m.14 views

Employee Record Management System 跨站脚本漏洞

PHPGurukul Phpgurukul Employee Record Management System is an Employee Record Management System from PHPGurukul, Inc. A cross-site scripting vulnerability exists in Employee Record Management System version 1.2, which stems from a cross-site scripting issue in editempprofile.php...

5.4CVSS5.4AI score0.00548EPSS
Exploits1References3
CVE
CVE
added 2022/10/28 12:0 a.m.50 views

CVE-2021-37781

CVE-2021-37781 affects Employee Record Management System v1.2. The issue is a Cross-Site Scripting (XSS) vulnerability via editempprofile.php. CVSS v3.1 base score 5.4 (Medium): AV:N, AC:L, PR:L, UI:R, S:C, C:L, I:L, A:N. Impact is Low for confidentiality and integrity, none for availability; exp...

5.4CVSS5.3AI score0.00548EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2022/10/28 12:0 a.m.48 views

CVE-2021-37782

CVE-2021-37782 affects the Employee Record Management System v1.2. The connected docs indicate a SQL Injection vulnerability in editempprofile.php , with CVSS v3.1 base metrics: 9.8 (CRITICAL), Network attack vector, no user interaction required, no privileges, and full impact on confidentiality,...

9.8CVSS9.7AI score0.00627EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/10/28 12:0 a.m.16 views

CVE-2021-37781

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

5.5AI score0.00548EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/10/28 12:0 a.m.14 views

CVE-2021-37781

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

5.3AI score0.00548EPSS
Exploits1References2
Rows per page
Query Builder