Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Employee Management System Project Subscribe
Filtered by product Employee Management System
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-2724 1 Employee Management System Project 1 Employee Management System 2022-08-12 N/A 9.8 CRITICAL
A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205837 was assigned to this vulnerability.
CVE-2022-2723 1 Employee Management System Project 1 Employee Management System 2022-08-12 N/A 9.8 CRITICAL
A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is an unknown function of the file /process/eprocess.php. The manipulation of the argument mailuid/pwd leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205836.
CVE-2022-2715 1 Employee Management System Project 1 Employee Management System 2022-08-12 N/A 9.8 CRITICAL
A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file eloginwel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205834 is the identifier assigned to this vulnerability.
CVE-2020-29215 1 Employee Management System Project 1 Employee Management System 2021-06-22 3.5 LOW 5.4 MEDIUM
A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account.