Employee Record Management System forgetpassword.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System has a SQL injection vulnerability that originates from a SQL injection vulnerability in the Email POST parameter via /forgetpassword.php, no detailed vulnerability details are available at...

Sql injection

SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php...

CVE-2021-43451

SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php...

CVE-2021-43451

PHPGURUKUL Employee Record Management System version 1.2 contains a SQL Injection vulnerability exploitable via the Email POST parameter of /forgetpassword.php. The issue arises from unsafe handling of user input in that endpoint, enabling attackers to manipulate SQL queries. Impact is aligned wi...