SourceCodester / Employee Management System
18 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-1905 | SourceCodester Employee Management System employee.php cross site scripting | MEDIUM | 5.1 | Mar 4, 2025 |
| CVE-2025-1591 | SourceCodester Employee Management System Department Page department.php cross site scripting | MEDIUM | 4.8 | Feb 23, 2025 |
| CVE-2025-1160 | SourceCodester Employee Management System index.php default credentials | MEDIUM | 6.9 | Feb 10, 2025 |
| CVE-2024-9083 | SourceCodester Employee Management System add-admin.php cross site scripting | MEDIUM | 5.1 | Sep 22, 2024 |
| CVE-2024-2394 | SourceCodester Employee Management System add-admin.php unrestricted upload | CRITICAL | 9.8 | Mar 12, 2024 |
| CVE-2024-25239 | SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloy… | CRITICAL | 9.8 | Feb 29, 2024 |
| CVE-2024-1878 | SourceCodester Employee Management System myprofile.php sql injection | HIGH | 8.8 | Feb 26, 2024 |
| CVE-2024-1877 | SourceCodester Employee Management System cancel.php sql injection | HIGH | 8.8 | Feb 26, 2024 |
| CVE-2024-1876 | SourceCodester Employee Management System psubmit.php sql injection | CRITICAL | 9.8 | Feb 26, 2024 |
| CVE-2024-1871 | SourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting | MEDIUM | 5.4 | Feb 24, 2024 |
| CVE-2024-1833 | SourceCodester Employee Management System login.php sql injection | MEDIUM | 6.9 | Feb 23, 2024 |
| CVE-2024-1011 | SourceCodester Employee Management System Leave delete-leave.php access control | HIGH | 8.8 | Jan 29, 2024 |
| CVE-2024-1010 | SourceCodester Employee Management System edit-profile.php cross site scripting | MEDIUM | 5.4 | Jan 29, 2024 |
| CVE-2024-1009 | SourceCodester Employee Management System login.php sql injection | CRITICAL | 9.8 | Jan 29, 2024 |
| CVE-2024-1008 | SourceCodester Employee Management System Profile Page edit-photo.php unrestricted upload | HIGH | 7.2 | Jan 29, 2024 |
| CVE-2024-1007 | SourceCodester Employee Management System edit_profile.php sql injection | HIGH | 7.2 | Jan 29, 2024 |
| CVE-2022-2724 | SourceCodester Employee Management System aprocess.php sql injection | CRITICAL | 9.8 | Aug 9, 2022 |
| CVE-2022-2723 | SourceCodester Employee Management System eprocess.php sql injection | CRITICAL | 9.8 | Aug 9, 2022 |
| CVE-2022-2715 | SourceCodester Employee Management System eloginwel.php sql injection | CRITICAL | 9.8 | Aug 9, 2022 |
Showing 1 to 18 of 18 CVEs