CVE-2024-1009

CRITICO 9.8CVE-2024-1009 · Published 29/01/2024 · updated 17/06/2026

In breve

CVE-2024-1009 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda employee management system (employee management system project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.76%, superiore al 55.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
employee management system employee_management_system_project	`= 1.0`	No fix yet

Description

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252278 is the identifier assigned to this vulnerability.

References

vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
youtu.be/oL98TSjy89Q · Exploit

Altre vulnerabilità di employee management system

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free