93 matches found
CVE-2026-5660: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /borrowedequip.php of the component Parameter Handler. This manipulation of the argument emp causes sql injection. The attack may be initiated remotely. The...
CVE-2026-5675: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /borrowedtool.php of the component Parameter Handler. The manipulation of the argument emp results in sql injection. It is possible to launch the attack remotely. The exploit has...
itsourcecode Construction Management System SQL注入漏洞
itsourcecode Construction Management System is an open-source construction management system developed by itsourcecode. Version 1.0 of the itsourcecode Construction Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameters in the file...
itsourcecode Construction Management System SQL注入漏洞
itsourcecode Construction Management System is an open-source construction management system developed by itsourcecode. Version 1.0 of the itsourcecode Construction Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the emp parameter in the...
CVE-2026-2059
A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /empedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the publ...
CVE-2026-2059
CVE-2026-2059 affects SourceCodester Medical Center Portal Management System 1.0. The vulnerability is in the unknown function of /emp_edit1.php where manipulation of the ID parameter enables SQL injection. The issue can be exploited remotely, and public exploits have been disclosed. Red Hat and ...
CVE-2026-2059
A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /empedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the publ...
CVE-2021-47898 Epson USB Display 1.6.0.0 Unquoted Service Path Vulnerability
Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMPUDSA service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in intermediate directories to gain elevated system access...
Malicious code in teaha-erws-emp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eeb5f2ffd3aa2cb03753fdbf1b68c61c27ba20865304e40744d9b699aeb096f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-135780
Malicious code in teaha-redsa-emp npm...
EUVD-2025-135788
Malicious code in teaha-erws-emp npm...
EUVD-2025-135789
Malicious code in teaha-erws-emp npm...
EUVD-2025-135781
Malicious code in teaha-redsa-emp npm...
MAL-2025-178963 Malicious code in teaha-erws-emp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eeb5f2ffd3aa2cb03753fdbf1b68c61c27ba20865304e40744d9b699aeb096f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2024-29676
Malicious code in bioql PyPI...
CVE-2025-9733 code-projects Human Resource Integrated System login_timeee.php sql injection
A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. This impacts an unknown function of the file /logintimeee.php. Performing manipulation of the argument empid results in sql injection. The attack may be initiated remotely. The exploit has been released to...
PT-2025-35414
Name of the Vulnerable Software and Affected Versions: code-projects Human Resource Integrated System version 1.0 Description: A security flaw exists in code-projects Human Resource Integrated System version 1.0. The issue impacts an unknown function within the /login timeee.php file. Manipulatio...
CVE-2025-9601
A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employeesalarysetup.php. The manipulation of the argument ddlEmpName results in sql injection. The attack may be launched remotely. The exploit is now public and may be...
Student Result Management System /elms/emp-changepassword.php Component Session Hijacking Vulnerability
Student Result Management System is a student result management system. Student Result Management System suffers from a session hijacking vulnerability that stems from an improperly disabled session in component /elms/emp-changepassword.php, no details of the vulnerability are available at this...