Sherlock vulnerabilities
We track 2 vulnerabilities in Sherlock products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 14, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Sherlock vulnerabilities
- 9.8 Critical severity
employee_management_system: Improper Neutralization of Special Elements used in an SQL Command
An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html.
- 9.8 Critical severity
Gym Management System: Improper Neutralization of Special Elements used in an SQL Command
Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied inp