Skip to content
OpenAdvisories

Product · code-projects

Employee Management System

17 known vulnerabilities.

15 results · Clear filters · Feed

  • Medium 6.3

    code-projects Employee Management System applyleaveprocess.php sql injection

    A weakness has been identified in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /process/applyleaveprocess.php. This manipulation of the argument ID causes sql injection. The attack can be…

  • Medium 6.3

    code-projects Employee Management System psubmit.php sql injection

    A security flaw has been discovered in code-projects Employee Management System 1.0. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid results in sql injection. It is possible to launch the attack remotely. The exp…

  • Medium 6.3

    code-projects Employee Management System changepassemp.php sql injection

    A vulnerability was identified in code-projects Employee Management System 1.0. This impacts an unknown function of the file /changepassemp.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly a…

  • Medium 4.3

    code-projects Employee Management System applyleave.php cross site scripting

    A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown function of the file /applyleave.php. Executing a manipulation of the argument ID can lead to cross site scripting. The attack may be performed from remote…

  • Medium 4.3

    code-projects Employee Management System empproject.php cross site scripting

    A vulnerability has been found in code-projects Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /empproject.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the…

  • Medium 4.3

    code-projects Employee Management System changepassemp.php cross site scripting

    A flaw has been found in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /changepassemp.php. Executing a manipulation of the argument ID can lead to cross site scripting. The attack may be p…

  • Medium 4.3

    code-projects Employee Management System myprofileup.php cross site scripting

    A vulnerability was detected in code-projects Employee Management System 1.0. Affected is an unknown function of the file /myprofileup.php. Performing a manipulation of the argument ID results in cross site scripting. The attack is possible to be carried out …

  • Medium 4.3

    code-projects Employee Management System myprofile.php cross site scripting

    A security vulnerability has been detected in code-projects Employee Management System 1.0. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument ID leads to cross site scripting. The attack can be executed remotely. T…

  • Medium 4.3

    code-projects Employee Management System eloginwel.php cross site scripting

    A weakness has been identified in code-projects Employee Management System 1.0. This affects an unknown function of the file /eloginwel.php. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The e…

  • Medium 6.3

    code-projects Employee Management System cancel.php sql injection

    A security vulnerability has been detected in code-projects Employee Management System 1.0. The affected element is an unknown function of the file 370project/cancel.php. The manipulation of the argument id/token leads to sql injection. The attack is possible…

  • Medium 6.3

    code-projects Employee Management System approve.php sql injection

    A weakness has been identified in code-projects Employee Management System 1.0. Impacted is an unknown function of the file 370project/approve.php. Executing a manipulation of the argument id/token can lead to sql injection. The attack can be executed remotel…

  • Medium 4.3

    code-projects Employee Management System mark.php cross site scripting

    A security flaw has been discovered in code-projects Employee Management System 1.0. This issue affects some unknown processing of the file 370project/mark.php. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is po…

  • Medium 6.3

    code-projects Employee Management System delete.php sql injection

    A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file 370project/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The ex…

  • Medium 6.3

    code-projects Employee Management System edit.php sql injection

    A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been…

  • Medium 4.3

    code-projects Employee Management System edit.php cross site scripting

    A vulnerability was identified in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. Th…