Employee Record Management System
Monthly
A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A SQL injection vulnerability in A vulnerability classified as critical (CVSS 7.3). Risk factors: public PoC available.
SQL injection vulnerability in PHPGurukul Employee Record Management System 1.3 allows remote authenticated attackers to manipulate the AdminName parameter in /admin/adminprofile.php, potentially exposing or modifying database contents. A public proof-of-concept exploit exists, though EPSS scores indicate a low probability of widespread exploitation (0.06%).
SQL injection in PHPGurukul Employee Record Management System 1.3 allows authenticated attackers to execute arbitrary SQL commands via the delid parameter in /admin/allemployees.php. A public exploit exists, but no active exploitation has been reported. The EPSS score is low (0.06%), indicating limited exploitation likelihood.
SQL injection in PHPGurukul Employee Record Management System 1.3 allows authenticated remote attackers to manipulate database queries via the 'emp3ctc' parameter in /myexp.php. A public exploit exists, but no active exploitation has been reported and EPSS risk is low (0.06%).
SQL injection in PHPGurukul Employee Record Management System 1.3 allows remote authenticated attackers to manipulate the 'emp3workduration' parameter in /editmyexp.php, potentially leading to data exfiltration or modification. A public exploit is available, but no active exploitation has been reported (not in CISA KEV). EPSS score is low (0.06%), indicating limited exploitation likelihood.
SQL injection in PHPGurukul Employee Record Management System 1.3 allows authenticated attackers to manipulate the newpassword parameter in /resetpassword.php, potentially leading to unauthorized data access or modification. A public exploit exists, but no active exploitation has been confirmed.
A vulnerability was found in PHPGurukul Employee Record Management System 1.3. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in PHPGurukul Employee Record Management System 1.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Directory traversal vulnerability in /admin/includes/* directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A SQL injection vulnerability in A vulnerability classified as critical (CVSS 7.3). Risk factors: public PoC available.
SQL injection vulnerability in PHPGurukul Employee Record Management System 1.3 allows remote authenticated attackers to manipulate the AdminName parameter in /admin/adminprofile.php, potentially exposing or modifying database contents. A public proof-of-concept exploit exists, though EPSS scores indicate a low probability of widespread exploitation (0.06%).
SQL injection in PHPGurukul Employee Record Management System 1.3 allows authenticated attackers to execute arbitrary SQL commands via the delid parameter in /admin/allemployees.php. A public exploit exists, but no active exploitation has been reported. The EPSS score is low (0.06%), indicating limited exploitation likelihood.
SQL injection in PHPGurukul Employee Record Management System 1.3 allows authenticated remote attackers to manipulate database queries via the 'emp3ctc' parameter in /myexp.php. A public exploit exists, but no active exploitation has been reported and EPSS risk is low (0.06%).
SQL injection in PHPGurukul Employee Record Management System 1.3 allows remote authenticated attackers to manipulate the 'emp3workduration' parameter in /editmyexp.php, potentially leading to data exfiltration or modification. A public exploit is available, but no active exploitation has been reported (not in CISA KEV). EPSS score is low (0.06%), indicating limited exploitation likelihood.
SQL injection in PHPGurukul Employee Record Management System 1.3 allows authenticated attackers to manipulate the newpassword parameter in /resetpassword.php, potentially leading to unauthorized data access or modification. A public exploit exists, but no active exploitation has been confirmed.
A vulnerability was found in PHPGurukul Employee Record Management System 1.3. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in PHPGurukul Employee Record Management System 1.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Directory traversal vulnerability in /admin/includes/* directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.