CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2024-25214

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

CVE-2024-25214

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

CVE-2024-25213

CVE-2024-25213 affects the Employee Management System v1.0, where a SQL injection vulnerability exists in the SQL query executed via the id parameter on the endpoint /edit.php . The root cause is a lack of proper input handling leading to possible data disclosure, modification, or corruption; the...

PT-2024-20826

Name of the Vulnerable Software and Affected Versions Employee Managment System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the mailud parameter at the "/aprocess.php" API endpoint. Recommendations For Employee Managment...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0, which originates from a SQL injection vulnerability in the file /edit.php...

CVE-2024-25216: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...

CVE-2024-25215: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

CVE-2024-25214: Improper Neutralization of Special Elements used in an SQL Command

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...

CVE-2024-25213: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2024-25212: Improper Neutralization of Special Elements used in an SQL Command

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...

CVE-2024-25318

Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...

CVE-2024-25310

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."...

Sql injection

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...

Sql injection

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2...

Sql injection

Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'eid' parameter in Hotel/admin/usersettingdel.php?eid=2...

Sql injection

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."...

Sql injection

Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...

CVE-2024-25308

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacherlogin.php...

CVE-2024-25313

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacherlogin.php...