Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-7063 1 Code-projects 1 Employee Management System 2026-04-27 7.3 High
A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component Endpoint. Performing a manipulation of the argument pwd results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVE-2026-7095 1 Code-projects 1 Employee Management System 2026-04-27 4.3 Medium
A vulnerability was identified in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.