VendorsPHPGurukulemployee_record_management_system1.2
Vulnerabilities

PHPGurukul Employee Record Management System 1.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2021-44966
SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.
Published 2021-12-13 · Modified
10.0EPSS 0.021
CVE-2021-43451
SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.
Published 2021-12-01 · Modified
9.8EPSS 0.022
CVE-2021-37782
Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.
Published 2022-10-28 · Modified
9.8EPSS 0.008
CVE-2021-44965
Directory traversal vulnerability in /admin/includes/* directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable server.
Published 2021-12-13 · Modified
7.8EPSS 0.022
CVE-2021-37781
Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php.
Published 2022-10-28 · Modified
5.4EPSS 0.004