Approved changes feed: RSS · Atom

cpe:2.3:a:remyandrade:employee_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorRemyandrade (778e90e9-129a-5d15-ad71-c8bb9070dcc5)
ProductEmployee Management System (be42baa8-7701-522b-82e8-f12003a888ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-57117 vulnerable 2026-06-03 15:04:59.650032 Details available
A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department.
Published: 2025-09-15T00:00:00.000Z
Updated: 2025-09-16T17:28:28.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29719 vulnerable 2026-06-03 15:00:14.429061 Details available
SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add_employee.php via the First Name and Address text fields.
Published: 2025-04-02T00:00:00.000Z
Updated: 2025-04-03T15:10:03.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26258 vulnerable 2026-06-03 14:59:58.787291 Details available
Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'
Published: 2025-09-26T00:00:00.000Z
Updated: 2025-09-26T20:33:02.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1905 vulnerable 2026-06-03 14:59:06.794690 SourceCodester Employee Management System employee.php cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-03-04T04:31:07.354Z
Updated: 2025-03-04T14:39:06.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1160 vulnerable 2026-06-03 14:58:57.926072 SourceCodester Employee Management System index.php default credentials
HIGH (7.3)
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-02-10T22:31:04.690Z
Updated: 2025-02-18T18:10:11.555Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.