Employee Profile Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:code-projects:employee_profile_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Code Projects (a64d3912-7513-5560-97cf-6216c4da48a5) |
|---|---|
| Product | Employee Profile Management System (2b8ffa7b-9a65-5733-8f5a-58661e8ede4c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-14285 |
vulnerable | 2026-06-08 07:06:34.186265 |
code-projects Employee Profile Management System edit_personnel.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_personnel.php. The manipulation of the argument per_id results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2025-12-09T01:02:05.842Z
Updated: 2026-02-24T05:45:11.317Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14222 |
vulnerable | 2026-06-08 07:06:33.886623 |
code-projects Employee Profile Management System print_personnel_report.php sql injection
MEDIUM (6.3)
A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /print_personnel_report.php. This manipulation of the argument per_id causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Published: 2025-12-08T07:32:05.544Z
Updated: 2026-02-24T05:44:19.591Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14195 |
vulnerable | 2026-06-08 07:06:33.837871 |
code-projects Employee Profile Management System add_file_query.php unrestricted upload
MEDIUM (6.3)
A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown function of the file /profiling/add_file_query.php. The manipulation of the argument per_file results in unrestricted upload. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2025-12-07T15:02:05.771Z
Updated: 2026-02-24T05:42:38.842Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14194 |
vulnerable | 2026-06-08 07:06:33.837340 |
code-projects Employee Profile Management System view_personnel.php cross site scripting
LOW (3.5)
A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file /view_personnel.php. The manipulation of the argument per_address/dr_school/other_school leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.
Published: 2025-12-07T14:32:06.854Z
Updated: 2026-02-24T05:42:25.040Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14193 |
vulnerable | 2026-06-08 07:06:33.835829 |
code-projects Employee Profile Management System view_personnel.php sql injection
MEDIUM (6.3)
A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /view_personnel.php. Executing a manipulation of the argument per_id can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-12-07T14:02:05.879Z
Updated: 2026-02-24T05:42:12.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0467 |
vulnerable | 2026-06-08 06:22:01.176319 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0466 |
vulnerable | 2026-06-08 06:22:01.175720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0465 |
vulnerable | 2026-06-08 06:22:01.173921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.