Employee Profile Management System
Monthly
SQL injection vulnerability in code-projects Employee Profile Management System 1.0 allows remote attackers to modify or retrieve database contents via the per_id parameter in edit_personnel.php. Exploit code is publicly available, but no active exploitation has been confirmed.
SQL injection in Employee Profile Management System 1.0 enables authenticated remote attackers to inject arbitrary SQL via the per_id parameter in the /print_personnel_report.php endpoint. Public exploit code is available, though active exploitation is not confirmed. The flaw can lead to data leakage or manipulation.
Unrestricted file upload in Employee Profile Management System 1.0 allows remote attackers to upload arbitrary files via the per_file parameter of /profiling/add_file_query.php, potentially achieving server-side code execution. Public exploit code is available, though no active exploitation has been confirmed and EPSS indicates a low exploitation probability (0.05%).
Stored cross-site scripting in code
SQL injection vulnerability in code-projects Employee Profile Management System 1.0 allows remote attackers with low privileges to manipulate the per_id parameter in /view_personnel.php, potentially leading to unauthorized database access. A public proof-of-concept exploit is available, but EPSS data indicates a low exploitation probability (0.04%) and there is no evidence of active exploitation in the wild. The vulnerability has been assigned CVE-2025-14193 and affects a niche application, limiting widespread risk.
A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0.php. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is low attack complexity. No vendor patch available.
SQL injection vulnerability in code-projects Employee Profile Management System 1.0 allows remote attackers to modify or retrieve database contents via the per_id parameter in edit_personnel.php. Exploit code is publicly available, but no active exploitation has been confirmed.
SQL injection in Employee Profile Management System 1.0 enables authenticated remote attackers to inject arbitrary SQL via the per_id parameter in the /print_personnel_report.php endpoint. Public exploit code is available, though active exploitation is not confirmed. The flaw can lead to data leakage or manipulation.
Unrestricted file upload in Employee Profile Management System 1.0 allows remote attackers to upload arbitrary files via the per_file parameter of /profiling/add_file_query.php, potentially achieving server-side code execution. Public exploit code is available, though no active exploitation has been confirmed and EPSS indicates a low exploitation probability (0.05%).
Stored cross-site scripting in code
SQL injection vulnerability in code-projects Employee Profile Management System 1.0 allows remote attackers with low privileges to manipulate the per_id parameter in /view_personnel.php, potentially leading to unauthorized database access. A public proof-of-concept exploit is available, but EPSS data indicates a low exploitation probability (0.04%) and there is no evidence of active exploitation in the wild. The vulnerability has been assigned CVE-2025-14193 and affects a niche application, limiting widespread risk.
A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0.php. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is low attack complexity. No vendor patch available.