Employee Management System CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Sherlock

Products

Employee Management System

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Sherlock

Products

Employee Management System

CVE-2024-25216

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Sherlock

Products

Employee Management System

CVE-2024-25214

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Sherlock

Products

Employee Management System

CVE-2024-25212

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Sherlock

Products

Employee Management System

Page 1 of 1.