Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-14195 2 Carmelogarcia, Code-projects 2 Employee Profile Management System, Employee Profile Management System 2026-02-24 6.3 Medium
A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown function of the file /profiling/add_file_query.php. The manipulation of the argument per_file results in unrestricted upload. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVE-2025-14193 2 Carmelogarcia, Code-projects 2 Employee Profile Management System, Employee Profile Management System 2026-02-24 6.3 Medium
A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /view_personnel.php. Executing a manipulation of the argument per_id can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-14194 2 Carmelogarcia, Code-projects 2 Employee Profile Management System, Employee Profile Management System 2026-02-24 3.5 Low
A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file /view_personnel.php. The manipulation of the argument per_address/dr_school/other_school leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.