CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-0466 – code-projects Employee Profile Management System file_table.php sql injection
https://notcve.org/view.php?id=CVE-2024-0466
A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file file_table.php. The manipulation of the argument per_id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250571. • https://github.com/BxYQ/vul/blob/main/EMPLOYEE_PROFILE_MANAGEMENT_SYSTEM%20_SQL1.pdf https://vuldb.com/?ctiid.250571 https://vuldb.com/?id.250571 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-0465 – code-projects Employee Profile Management System download.php path traversal
https://notcve.org/view.php?id=CVE-2024-0465
A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument download_file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. • https://github.com/BxYQ/vul/blob/main/EMPLOYEE_PROFILE_MANAGEMENT_SYSTEM%20_FileRead.pdf https://vuldb.com/?ctiid.250570 https://vuldb.com/?id.250570 • CWE-24: Path Traversal: '../filedir' •