CyberRota Analysis
AI-GeneratedA SQL injection vulnerability exists in the Admin Login Endpoint of the Employee Management System 1.0, specifically within the /process/aprocess.php file, due to improper handling of the mailuid argument. This flaw allows remote attackers to execute arbitrary SQL commands, potentially compromising the integrity and confidentiality of the database. Organizations using this system should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.