Carmelogarcia

Employee Profile Management System

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-14222

Exploit
  • EPSS 0.03%
  • Veröffentlicht 08.12.2025 07:32:05
  • Zuletzt bearbeitet 10.12.2025 17:43:16

A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /print_personnel_report.php. This manipulation of the argument per_id causes sql injection. The attack may be initiated remotel...

8.8

CVE-2025-14195

Exploit
  • EPSS 0.04%
  • Veröffentlicht 07.12.2025 15:15:47
  • Zuletzt bearbeitet 10.12.2025 17:51:19

A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown function of the file /profiling/add_file_query.php. The manipulation of the argument per_file results in unrestricted upload. The atta...

5.4

CVE-2025-14194

Exploit
  • EPSS 0.03%
  • Veröffentlicht 07.12.2025 14:32:06
  • Zuletzt bearbeitet 10.12.2025 17:52:01

A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file /view_personnel.php. The manipulation of the argument per_address/dr_school/other_school leads to cross sit...

8.8

CVE-2025-14193

Exploit
  • EPSS 0.03%
  • Veröffentlicht 07.12.2025 14:02:05
  • Zuletzt bearbeitet 10.12.2025 17:52:18

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /view_personnel.php. Executing manipulation of the argument per_id can lead to sql injection. The attack can b...

6.1

CVE-2024-0467

  • EPSS 0.06%
  • Veröffentlicht 12.01.2024 20:15:47
  • Zuletzt bearbeitet 21.11.2024 08:46:39

A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_position_query.php. The manipulation of the argument pos_name leads to cross sit...