CVE-2026-76764: medium-severity vulnerability in code-projects Employee Management System
code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.4%
A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Employee Management Systempublic PoCs found — 1
cve_referencegithub.com/niaoniaollll/cve/issues/10unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — code-projects Employee Management System
In the same product, most dangerous first.
CVE-2026-9448MEDIUMcode-projects Employee Management System applyleave.php cross site scriptingEPSS 0.3%CVE-2026-7116MEDIUMcode-projects Employee Management System mark.php cross site scriptingEPSS 0.3%CVE-2026-7095MEDIUMcode-projects Employee Management System edit.php cross site scriptingEPSS 0.3%CVE-2026-9419MEDIUMcode-projects Employee Management System empproject.php cross site scriptingEPSS 0.3%CVE-2026-9418MEDIUMcode-projects Employee Management System changepassemp.php cross site scriptingEPSS 0.3%CVE-2026-9417MEDIUMcode-projects Employee Management System myprofileup.php cross site scriptingEPSS 0.3%