EUVD-2025-28725Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to the application
-
DeliverySend crafted POST to /editprofile.php with SQL payload in emp1name
-
ExploitSQL injection executes
-
ExecutionExtract or modify database data
-
ImpactImpact on confidentiality and integrity
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Input neutralization, injection prevention
|
| Exploitation Conditions | The attacker must have valid user credentials to access the /editprofile.php endpoint (PR:L from CVSS). No special configuration is required; the vulnerability exists in the default installation of version 1.0. The attack is remote over the network (AV:N). |
| Impact | CVSS 4.0 base score is 2.1 (Low) with vector AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L, indicating low impact on confidentiality, integrity, and availability. EPSS score is 0.06% (low probability of exploitation). A public exploit is available, but no CISA KEV listing or active exploitation reports exist. The low CVSS score and EPSS suggest limited real-world risk, though the presence of a public exploit increases the threat for targeted attacks. |
| Exploit ScenarioDerived | An authenticated attacker sends a crafted HTTP POST request to /editprofile.php with a malicious SQL payload in the emp1name parameter, extracting sensitive data from the database. A public exploit is available, simplifying the attack. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Jul 26, 2026
SQL injection in itsourcecode Employee Record Management System 1.0 allows remote authenticated attackers to manipulate the emp1name parameter in /editprofile.php, potentially leading to data breach or modification. A public exploit exists, but no active exploitation has been confirmed (EPSS 0.06%).
Earlier versions of this analysis (1)
RemediationAI
No official patch has been released by the vendor. As a workaround, implement input validation and parameterized queries for the emp1name parameter in /editprofile.php. Additionally, restrict access to the editprofile.php endpoint to trusted users only. Monitor for suspicious database queries. Note that these mitigations may require code changes and could affect functionality.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is a SQL injection (CWE-74) in a PHP-based employee management system. The affected product is identified by CPE cpe:2.3:a:clivedelacruz:employee_management_system:1.0. The issue occurs in the /editprofile.php endpoint, where the emp1name parameter is not properly sanitized, allowing an attacker to inject arbitrary SQL commands.
Know when PHP gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
PR:L due to authentication required; C:L/I:L as SQLi can read/write data but not full system compromise.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability was found in itsourcecode Employee Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /editprofile.php. The manipulation of the argument emp1name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Executive ViewAI
Organizations using A vulnerability should be aware of moderate risk from CVE-2025-6351, a injection vulnerability rated CVSS 6.3. Exploitation could allow attackers to execute code or inject malicious input. Proof-of-concept code is publicly available. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: deploy WAF rules, restrict network access, enable logging.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Rated critical severity (C
Roundcube Webmail contains a critical PHP object deserialization vulnerability (CVE-2025-49113, CVSS 9.9) that allows au
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
Palo Alto Networks PAN-OS management web interface contains an authentication bypass allowing unauthenticated attackers
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
Exploit-DB