PHPGurukul Employee Record Management System 1.2
Approved changes feed: RSS · Atom
cpe:2.3:a:phpgurukul:employee_record_management_system:1.2:*:*:*:*:*:*:*
part: a version: 1.2 update: *
| Vendor | Phpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d) |
|---|---|
| Product | Employee Record Management System (0ea2fa48-cb17-5ee5-93d2-da9369b4b10a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-44966 |
vulnerable | 2026-06-08 05:36:47.652450 |
Details available
SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.
Published: 2021-12-13T14:20:43.000Z
Updated: 2024-08-04T04:32:13.611Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44965 |
vulnerable | 2026-06-08 05:36:47.652027 |
Details available
Directory traversal vulnerability in /admin/includes/* directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable server.
Published: 2021-12-13T14:43:24.000Z
Updated: 2024-08-04T04:32:13.547Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43451 |
vulnerable | 2026-06-08 05:36:43.409955 |
Details available
SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.
Published: 2021-12-01T18:14:00.000Z
Updated: 2024-08-04T03:55:29.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37782 |
vulnerable | 2026-06-08 05:32:54.757270 |
Details available
Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.
Published: 2022-10-28T00:00:00.000Z
Updated: 2025-05-12T19:42:14.740Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37781 |
vulnerable | 2026-06-08 05:32:54.756706 |
Details available
Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php.
Published: 2022-10-28T00:00:00.000Z
Updated: 2025-05-07T16:17:32.147Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.