CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2024-25214

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

CVE-2024-25214

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

CVE-2024-25214: Improper Neutralization of Special Elements used in an SQL Command

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

PT-2024-20826

Name of the Vulnerable Software and Affected Versions Employee Managment System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the mailud parameter at the "/aprocess.php" API endpoint. Recommendations For Employee Managment...

CVE-2024-25213: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2024-25213

CVE-2024-25213 affects the Employee Management System v1.0, where a SQL injection vulnerability exists in the SQL query executed via the id parameter on the endpoint /edit.php . The root cause is a lack of proper input handling leading to possible data disclosure, modification, or corruption; the...

CVE-2024-25215: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

CVE-2024-25212: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...

CVE-2024-25216: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0, which originates from a SQL injection vulnerability in the file /edit.php...

CVE-2024-25318

Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...

CVE-2024-25310

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."...

Sql injection

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...

Sql injection

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2...

Sql injection

Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...

Sql injection

Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'eid' parameter in Hotel/admin/usersettingdel.php?eid=2...

Sql injection

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."...

CVE-2024-25313

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacherlogin.php...

CVE-2024-25308

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacherlogin.php...