Логотип exploitDog
bind:CVE-2025-7127
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-7127

Количество 3

Количество 3

nvd логотип

CVE-2025-7127

7 месяцев назад

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 4.7
EPSS: Низкий
github логотип

GHSA-h753-vphq-h5g6

7 месяцев назад

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 4.7
EPSS: Низкий
fstec логотип

BDU:2025-08124

8 месяцев назад

Уязвимость сценария changepassword.php (/admin/changepassword.php) системы управления персоналом Employee Management System, позволяющая нарушителю выполнить произвольный код

CVSS3: 4.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-7127

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 4.7
0%
Низкий
7 месяцев назад
github логотип
GHSA-h753-vphq-h5g6

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 4.7
0%
Низкий
7 месяцев назад
fstec логотип
BDU:2025-08124

Уязвимость сценария changepassword.php (/admin/changepassword.php) системы управления персоналом Employee Management System, позволяющая нарушителю выполнить произвольный код

CVSS3: 4.7
0%
Низкий
8 месяцев назад

Уязвимостей на страницу