CVE-2025-14222: falha de média gravidade em code-projects Employee Profile Management System
code-projects Employee Profile Management System print_personnel_report.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /print_personnel_report.php. This manipulation of the argument per_id causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Employee Profile Management SystemCVEs relacionadas — code-projects Employee Profile Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-0465LOWcode-projects Employee Profile Management System download.php path traversalEPSS 0.7%CVE-2024-0466MEDIUMcode-projects Employee Profile Management System file_table.php sql injectionEPSS 0.6%CVE-2024-0467LOWcode-projects Employee Profile Management System edit_position_query.php cross site scriptingEPSS 0.4%CVE-2025-14285MEDIUMcode-projects Employee Profile Management System edit_personnel.php sql injectionEPSS 0.4%CVE-2025-14195MEDIUMcode-projects Employee Profile Management System add_file_query.php unrestricted uploadEPSS 0.4%CVE-2025-14193MEDIUMcode-projects Employee Profile Management System view_personnel.php sql injectionEPSS 0.4%