EUVD-2025-21334Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Input neutralization, injection prevention
|
| Impact | Real-world risk is CRITICAL despite moderate CVSS 7.3 score due to multiple aggravating factors: (1) Attack Vector is Network with zero privilege requirements and no user interaction (AV:N/PR:N/UI:N), (2) Attack Complexity is Low (AC:L), indicating reliable exploitation, (3) Public exploit code is available, elevating EPSS exploitation probability significantly above baseline, (4) The vulnerability impacts confidentiality, integrity, and availability (C:L/I:L/A:L), (5) No patch availability confirmed suggests active exploitation window. Using SSVC framework: exploitation is public (POC available), likely automatable (SQL injection tools are mature), and technical impact is total (database compromise). This contradicts the moderate CVSS score and represents a true critical risk requiring emergency patching. Organizations running Job Diary 1.0 should treat this as actively exploitable and prioritize immediately. |
| Exploit ScenarioDerived | An unauthenticated attacker sends an HTTP request to http://target/view-emp.php?ID=1' OR '1'='1 (or encoded variant). The application concatenates this directly into a SQL query like SELECT * FROM employees WHERE ID = 1' OR '1'='1, returning all employee records. Advanced attacks use UNION-based injection to extract user credentials, enumerate database structure, or execute stored procedures. With publicly available POC tools, attackers can automate this across multiple Job Diary installations discovered via shodan/censys scans. The zero-privilege, zero-interaction attack vector means compromise can occur from external networks without any prior access, making this suitable for mass exploitation campaigns targeting organizations running outdated Job Diary instances. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAI
CVE-2025-7594 is a critical SQL injection vulnerability in code-projects Job Diary version 1.0 affecting the /view-emp.php endpoint's ID parameter, allowing unauthenticated remote attackers to execute arbitrary SQL queries and potentially extract, modify, or delete database contents. The vulnerability has been publicly disclosed with exploit code available, and the low attack complexity combined with network accessibility makes this a high-priority threat requiring immediate patching.
RemediationAI
{'type': 'Immediate Actions', 'steps': ['Disable or restrict access to /view-emp.php endpoint via WAF or network ACL until patch is applied', 'Implement emergency input validation: validate ID parameter as numeric only, reject special SQL characters', 'Enable SQL error suppression to prevent information disclosure']} {'type': 'Patching', 'steps': ['Contact code-projects for availability of Job Diary 1.0 security patch; no patch version identified in CVE data', 'If patch unavailable, consider upgrading to newer version if available', 'Apply parameterized queries (prepared statements) to /view-emp.php: use PDO/MySQLi with bound parameters instead of string concatenation']} {'type': 'Mitigation', 'steps': ['Implement Web Application Firewall (WAF) rules to detect and block SQL injection patterns in ID parameter', 'Apply rate limiting to /view-emp.php to reduce automated exploitation velocity', 'Enable database query logging and monitor for unusual SQL patterns', 'Conduct database audit for unauthorized access or modifications since disclosure date']} {'type': 'Detection', 'steps': ['Monitor for SQL keywords (UNION, SELECT, DROP, etc.) in ID parameter logs', 'Alert on database queries executed from web application context with suspicious WHERE clauses', 'Review access logs for encoded SQL injection attempts (%27, %3D, etc.)']}
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability exploits improper input validation in PHP-based web application code. The /view-emp.php file fails to sanitize or parameterize the ID parameter before incorporating it into SQL queries, enabling SQL injection (CWE-74: Improper Neutralization of Special Elements used in an Output). The root cause is insufficient use of prepared statements or input validation mechanisms. code-projects Job Diary 1.0 is a PHP web application (CPE would be cpe:2.3:a:code-projects:job_diary:1.0:*:*:*:*:*:*:*) vulnerable via direct HTTP GET/POST requests to the affected endpoint. The CWE-74 classification indicates the application treats user input as SQL code rather than data.
Know when Job Diary gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was found in code-projects Job Diary 1.0. It has been classified as critical. This affects an unknown part of the file /view-emp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Executive ViewAI
A critical SQL injection vulnerability in Job Diary 1.0 allows remote attackers to compromise database integrity and access sensitive employee information without authentication. With public exploits available and no vendor patch, immediate action is required to prevent data breach and operational disruption.
Deploy Web Application Firewall (WAF) with SQL injection detection rules targeting /view-emp.php ID parameter; restrict network access to application via IP whitelist or VPN; implement database activity monitoring to detect exploitation attempts; disable or remove the /view-emp.php functionality if not critical; apply database account least-privilege principles; consider disabling the entire application until patched alternative is available.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
CVE-2025-7533 is a SQL injection vulnerability in code-projects Job Diary 1.0 affecting the /view-details.php file throu
CVE-2025-7474 is a critical SQL injection vulnerability in code-projects Job Diary 1.0 affecting the /search.php file's
A critical SQL injection vulnerability exists in code-projects Job Diary 1.0 via the ID parameter in /view-cad.php, allo
CVE-2025-7593 is a critical SQL injection vulnerability in code-projects Job Diary 1.0 affecting the /view-all.php endpo
A vulnerability was determined in code-projects Job Diary 1.0. Rated medium severity (CVSS 6.9), this vulnerability is r
A vulnerability was found in code-projects Job Diary 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remote
A vulnerability has been found in code-projects Job Diary 1.0. Rated medium severity (CVSS 6.9), this vulnerability is r
Exploit-DB