CVE-2026-37595 - SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php

Back Back to CVE browser

LOW

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php

Published Apr 14, 2026

2.7

LOW

CVSS 3.1

EPSS 0.31%

Description

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-22264		Advisory
https://github.com/shininadd/cve_report/blob/main/sourcecodester/online-employees-work-home-attendance-system/SQL-4.md

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 14, 2026

Updated Apr 14, 2026

Reserved Apr 6, 2026

Link CVE-2026-37595

CISA Vulnrichment

Updated Apr 14, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2026-37595

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 14, 2026

Updated Apr 14, 2026

Link EUVD-2026-22264

GitHub

No data