21 matches found
CVE-2026-2059 SourceCodester Medical Center Portal Management System emp_edit1.php sql injection
A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /empedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the publ...
CVE-2023-31944
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the empid parameter at employeeedit.php...
CVE-2025-11090
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected is an unknown function of the file /admin/employee/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might...
PT-2024-25862 · Unknown · Sourcecodester Prison Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue has been found in the SourceCodester Prison Management System, affecting some unknown functionality of the file /Employee/edit-profile.php. This issue leads to...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in the SourceCodester Prison Management System version 1.0, which originates in the /Employee/edit-profile.php file and can be exploited for SQL injection attacks...
CVE-2023-31944
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the empid parameter at employeeedit.php...
CVE-2023-31944
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the empid parameter at employeeedit.php...
Online Travel Agency System SQL注入漏洞
Online Travel Agency System is an online travel agency system by Qaseem Hilal, an individual developer. A security vulnerability exists in Online Travel Agency System version v.1.0, which can be exploited to execute arbitrary code from the empid parameter of the employeeedit.php file...
PT-2023-23542 · Unknown · Online Travel Agency System
Name of the Vulnerable Software and Affected Versions: Online Travel Agency System version 1.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the emp id parameter at the "employee edit.php" endpoint. This enables the attacker to potentially access and...
Online Payroll System Cross-Site Scripting Vulnerability
Online Payroll System is a system for distributing payroll online. A cross-site scripting vulnerability exists in Online Payroll System. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /admin/employeeedit.php, which can be exploited to execute...
CVE-2023-1853
A vulnerability, which was classified as problematic, has been found in SourceCodester Online Payroll System 1.0. This issue affects some unknown processing of the file /admin/employeeedit.php. The manipulation of the argument of leads to cross site scripting. The attack may be initiated remotely...
Online Payroll System 跨站脚本漏洞
Online Payroll System is a system for distributing payroll online. A cross-site scripting vulnerability exists in Online Payroll System. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /admin/employeeedit.php, which can be exploited to execute...
PT-2023-17285 · Unknown · Sourcecodester Online Payroll System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Payroll System version 1.0 Description: A problematic issue has been found in the processing of the file /admin/employee edit.php, allowing for cross site scripting through the manipulation of an argument. This issue can...
CVE-2022-32012
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/employee/index.php?view=edit&id=...
CVE-2022-28019
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...
CVE-2022-28019
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...
CVE-2022-28013
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleemployeeedit.php...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...
CVE-2022-28019
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...
Attendance and Payroll System SQL注入漏洞
Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminemployee edit.php lacks validation of external input...