Code-projects

Employee Profile Management System

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-14285

Exploit
  • EPSS 0.02%
  • Veröffentlicht 09.12.2025 01:16:54
  • Zuletzt bearbeitet 11.12.2025 18:50:30

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_personnel.php. The manipulation of the argument per_id results in sql injection. The attack can be launched remotely. ...

8.8

CVE-2025-14222

Exploit
  • EPSS 0.03%
  • Veröffentlicht 08.12.2025 07:32:05
  • Zuletzt bearbeitet 10.12.2025 17:43:16

A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /print_personnel_report.php. This manipulation of the argument per_id causes sql injection. The attack may be initiated remotel...

8.8

CVE-2025-14195

Exploit
  • EPSS 0.04%
  • Veröffentlicht 07.12.2025 15:15:47
  • Zuletzt bearbeitet 10.12.2025 17:51:19

A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown function of the file /profiling/add_file_query.php. The manipulation of the argument per_file results in unrestricted upload. The atta...

5.4

CVE-2025-14194

Exploit
  • EPSS 0.03%
  • Veröffentlicht 07.12.2025 14:32:06
  • Zuletzt bearbeitet 10.12.2025 17:52:01

A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file /view_personnel.php. The manipulation of the argument per_address/dr_school/other_school leads to cross sit...

8.8

CVE-2025-14193

Exploit
  • EPSS 0.03%
  • Veröffentlicht 07.12.2025 14:02:05
  • Zuletzt bearbeitet 10.12.2025 17:52:18

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /view_personnel.php. Executing manipulation of the argument per_id can lead to sql injection. The attack can b...

5.3

CVE-2024-0465

  • EPSS 0.11%
  • Veröffentlicht 12.01.2024 19:15:12
  • Zuletzt bearbeitet 21.11.2024 08:46:38

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument download_file leads to path traversal: '.....

9.8

CVE-2024-0466

  • EPSS 0.06%
  • Veröffentlicht 12.01.2024 19:15:12
  • Zuletzt bearbeitet 21.11.2024 08:46:38

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file file_table.php. The manipulation of the argument per_id leads to sql inj...