Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:employee_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductEmployee Management System (3582f579-8812-53fa-a479-cd3114e0dd0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9451 vulnerable 2026-06-08 08:08:58.971422 code-projects Employee Management System applyleaveprocess.php sql injection
MEDIUM (6.3)
A weakness has been identified in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /process/applyleaveprocess.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-05-25T10:45:10.201Z
Updated: 2026-05-26T14:49:17.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9450 vulnerable 2026-06-08 08:08:58.971301 code-projects Employee Management System psubmit.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in code-projects Employee Management System 1.0. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-05-25T10:30:09.395Z
Updated: 2026-05-26T13:42:18.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9449 vulnerable 2026-06-08 08:08:58.971174 code-projects Employee Management System changepassemp.php sql injection
MEDIUM (6.3)
A vulnerability was identified in code-projects Employee Management System 1.0. This impacts an unknown function of the file /changepassemp.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Published: 2026-05-25T10:15:11.209Z
Updated: 2026-05-26T13:16:30.245Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9448 vulnerable 2026-06-08 08:08:58.970925 code-projects Employee Management System applyleave.php cross site scripting
MEDIUM (4.3)
A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown function of the file /applyleave.php. Executing a manipulation of the argument ID can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Published: 2026-05-25T10:00:13.514Z
Updated: 2026-05-28T13:05:23.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9419 vulnerable 2026-06-08 08:08:58.954441 code-projects Employee Management System empproject.php cross site scripting
MEDIUM (4.3)
A vulnerability has been found in code-projects Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /empproject.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-05-25T02:45:10.701Z
Updated: 2026-05-26T13:21:16.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9418 vulnerable 2026-06-08 08:08:58.954181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9417 vulnerable 2026-06-08 08:08:58.954030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9416 vulnerable 2026-06-08 08:08:58.953865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9415 vulnerable 2026-06-08 08:08:58.953530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7118 vulnerable 2026-06-08 08:07:05.412699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7117 vulnerable 2026-06-08 08:07:05.412269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7116 vulnerable 2026-06-08 08:07:05.411920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7115 vulnerable 2026-06-08 08:07:05.411460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7114 vulnerable 2026-06-08 08:07:05.411090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7095 vulnerable 2026-06-08 08:07:05.384830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7063 vulnerable 2026-06-08 08:07:05.335699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.