Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:employee_profile_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductEmployee Profile Management System (2b8ffa7b-9a65-5733-8f5a-58661e8ede4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14285 vulnerable 2026-06-03 14:58:55.021984 code-projects Employee Profile Management System edit_personnel.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_personnel.php. The manipulation of the argument per_id results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2025-12-09T01:02:05.842Z
Updated: 2026-02-24T05:45:11.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0466 vulnerable 2026-06-03 14:54:02.810193 code-projects Employee Profile Management System file_table.php sql injection
MEDIUM (5.5)
A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file file_table.php. The manipulation of the argument per_id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250571.
Published: 2024-01-12T19:00:06.068Z
Updated: 2024-10-24T15:30:46.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0465 vulnerable 2026-06-03 14:54:02.809660 code-projects Employee Profile Management System download.php path traversal
LOW (3.5)
A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument download_file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-250570 is the identifier assigned to this vulnerability.
Published: 2024-01-12T19:00:04.987Z
Updated: 2025-06-16T18:35:08.234Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.