employee_management_system vulnerabilities

2 known vulnerabilities in employee_management_system from Employee Management System Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  employee_management_system: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-48813Oct 11, 2024Employee Management System Project

  SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via the admin_id parameter of the /update-employee.php component.

• 9.8 Critical severity

  employee_management_system: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-28595Mar 19, 2024Employee Management System ProjectEPSS 1.23%

  SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the admin_id parameter in update-admin.php.