CVE-2025-14285: falha de média gravidade em code-projects Employee Profile Management System
code-projects Employee Profile Management System edit_personnel.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_personnel.php. The manipulation of the argument per_id results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Employee Profile Management SystemCVEs relacionadas — code-projects Employee Profile Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-0465LOWcode-projects Employee Profile Management System download.php path traversalEPSS 0.7%CVE-2024-0466MEDIUMcode-projects Employee Profile Management System file_table.php sql injectionEPSS 0.6%CVE-2024-0467LOWcode-projects Employee Profile Management System edit_position_query.php cross site scriptingEPSS 0.4%CVE-2025-14195MEDIUMcode-projects Employee Profile Management System add_file_query.php unrestricted uploadEPSS 0.4%CVE-2025-14193MEDIUMcode-projects Employee Profile Management System view_personnel.php sql injectionEPSS 0.4%CVE-2025-14222MEDIUMcode-projects Employee Profile Management System print_personnel_report.php sql injectionEPSS 0.3%