Lucene search
K

21 matches found

Cvelist
Cvelist
added 2026/02/06 5:2 p.m.32 views

CVE-2026-2059 SourceCodester Medical Center Portal Management System emp_edit1.php sql injection

A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /empedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the publ...

7.5CVSS0.00018EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/09 12:32 p.m.3 views

CVE-2023-31944

SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the empid parameter at employeeedit.php...

7.2CVSS8.8AI score0.01289EPSS
Exploits1References1
NVD
NVD
added 2025/09/28 1:15 a.m.1 views

CVE-2025-11090

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected is an unknown function of the file /admin/employee/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might...

8.8CVSS0.00064EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2024/04/08 12:0 a.m.2 views

PT-2024-25862 · Unknown · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue has been found in the SourceCodester Prison Management System, affecting some unknown functionality of the file /Employee/edit-profile.php. This issue leads to...

8.8CVSS7AI score0.00053EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/04/08 12:0 a.m.1 views

Prison Management System SQL注入漏洞

Prison Management System is a prison management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in the SourceCodester Prison Management System version 1.0, which originates in the /Employee/edit-profile.php file and can be exploited for SQL injection attacks...

8.8CVSS7AI score0.00053EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2023/08/17 8:15 p.m.1 views

CVE-2023-31944

SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the empid parameter at employeeedit.php...

7.2CVSS6.2AI score0.01289EPSS
Exploits1References2
OSV
OSV
added 2023/08/17 8:15 p.m.1 views

CVE-2023-31944

SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the empid parameter at employeeedit.php...

7.2CVSS6.1AI score0.01289EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/08/17 12:0 a.m.0 views

Online Travel Agency System SQL注入漏洞

Online Travel Agency System is an online travel agency system by Qaseem Hilal, an individual developer. A security vulnerability exists in Online Travel Agency System version v.1.0, which can be exploited to execute arbitrary code from the empid parameter of the employeeedit.php file...

7.2CVSS7.5AI score0.01289EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/08/17 12:0 a.m.4 views

PT-2023-23542 · Unknown · Online Travel Agency System

Name of the Vulnerable Software and Affected Versions: Online Travel Agency System version 1.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the emp id parameter at the "employee edit.php" endpoint. This enables the attacker to potentially access and...

7.2CVSS7.6AI score0.01289EPSS
Exploits1References7
CNVD
CNVD
added 2023/04/11 12:0 a.m.24 views

Online Payroll System Cross-Site Scripting Vulnerability

Online Payroll System is a system for distributing payroll online. A cross-site scripting vulnerability exists in Online Payroll System. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /admin/employeeedit.php, which can be exploited to execute...

6AI score0.00274EPSS
Exploits1Affected Software1
OSV
OSV
added 2023/04/05 8:15 a.m.1 views

CVE-2023-1853

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Payroll System 1.0. This issue affects some unknown processing of the file /admin/employeeedit.php. The manipulation of the argument of leads to cross site scripting. The attack may be initiated remotely...

6.1CVSS3.9AI score
Exploits0References3
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.2 views

Online Payroll System 跨站脚本漏洞

Online Payroll System is a system for distributing payroll online. A cross-site scripting vulnerability exists in Online Payroll System. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /admin/employeeedit.php, which can be exploited to execute...

6.1CVSS6.2AI score0.00274EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/04/05 12:0 a.m.2 views

PT-2023-17285 · Unknown · Sourcecodester Online Payroll System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Payroll System version 1.0 Description: A problematic issue has been found in the processing of the file /admin/employee edit.php, allowing for cross site scripting through the manipulation of an argument. This issue can...

6.1CVSS4.4AI score0.00274EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2022/06/02 4:15 p.m.1 views

CVE-2022-32012

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/employee/index.php?view=edit&id=...

7.2CVSS7.2AI score0.00274EPSS
Exploits1References2
OSV
OSV
added 2022/04/21 8:15 p.m.2 views

CVE-2022-28019

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...

8.8CVSS7.3AI score0.003EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/21 8:15 p.m.2 views

CVE-2022-28019

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...

8.8CVSS7.2AI score0.003EPSS
Exploits1References2
NVD
NVD
added 2022/04/21 8:15 p.m.13 views

CVE-2022-28013

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleemployeeedit.php...

8.8CVSS0.00257EPSS
Exploits1References1
Prion
Prion
added 2022/04/21 8:15 p.m.11 views

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...

6.5CVSS8.9AI score0.003EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/04/21 7:5 p.m.11 views

CVE-2022-28019

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...

9.2AI score0.003EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.2 views

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminemployee edit.php lacks validation of external input...

8.8CVSS6AI score0.003EPSS
Exploits1References2
Rows per page
Query Builder