93 matches found
CVE-2025-50490: Improper Input Validation
Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...
Job Diary view-emp.php File SQL Injection Vulnerability
Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /view-emp.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
CVE-2025-7594
A vulnerability was found in code-projects Job Diary 1.0. It has been classified as critical. This affects an unknown part of the file /view-emp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
Code-Projects Job Diary 注入漏洞
Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /view-emp.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
CVE-2025-2854
A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file updateemployee.php. The manipulation of the argument emptype leads to sql injection. The attack can be launched remotely. The...
Code-Projects Payroll Management System 注入漏洞
Payroll Management System is a payroll management system. A SQL injection vulnerability exists in Payroll Management System version 1.0 due to a lack of validation of externally entered SQL statements in the parameter emptype. An attacker can exploit this vulnerability to execute illegal SQL...
CVE-2024-31803
Buffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary code via the FerretCOT::readpredata128fromfile function...
NEXT-EMP 1.0 Shell Upload
NEXT-EMP version 1.0 suffers from a remote shell upload vulnerability. Titles: NEXT-EMP v1.0-Copyright © 2024. All rights reserved. File Upload-FU and Remote Code Execution-RCE Vulnerabilities Author: nu11secur1ty Date: 01/29/2025 Vendor: https://www.mayurik.com/ Software:...
CVE-2023-51157
Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter...
CVE-2023-51157
CVE-2023-51157 affects ZKTeco WDMS v5.1.3 Pro. A Cross Site Scripting (XSS) flaw allows a remote attacker, via a crafted script in the Emp Name field, to execute arbitrary code and access sensitive data. CVSS v3.1 base metrics: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (Impact: Confidentiality, Integri...
CVE-2024-7910 CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload
A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/emp-profile-avatar.php of the component Profile Photo Update Handler. The manipulation leads to unrestricted upload. The...
PT-2024-37941 · Unknown · Sourcecodester Record Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Record Management System version 1.0 Description: A critical issue affects the processing of the file edit emp.php, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely...
CVE-2024-31803
Buffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary code via the FerretCOT::readpredata128fromfile function...
CVE-2024-31803
Buffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary code via the FerretCOT::readpredata128fromfile function...
emp-ot 安全漏洞
emp-ot is an emp-toolkit open source library. A security vulnerability exists in emp-ot version v.0.2.4, which stems from the presence of a buffer overflow vulnerability that allows remote attackers to execute arbitrary code...
CVE-2024-31803
Buffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary code via the FerretCOT::readpredata128fromfile function...
CVE-2024-31803
The emp-ot open source library (v.0.2.4) contains a stack-based buffer overflow vulnerability. A remote attacker can exploit this flaw by targeting the FerretCOT::read_pre_data128_from_file function to achieve arbitrary code execution . No information regarding a patched version is currently avai...
CVE-2024-31803
Buffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary code via the FerretCOT::readpredata128fromfile function...
PT-2024-24213 · Emp-Ot · Emp-Ot
Name of the Vulnerable Software and Affected Versions: emp-ot version 0.2.4 Description: A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the FerretCOT::read pre data128 from file function. Recommendations: For emp-ot version 0.2.4, consider restricting access to the...