Vulnerabilities > Phpgurukul > Employee Record Management System > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-10-28 CVE-2021-37782 SQL Injection vulnerability in PHPgurukul Employee Record Management System 1.2
Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.
network
low complexity
phpgurukul CWE-89
critical
 9.8
9.8
2021-12-13 CVE-2021-44966 SQL Injection vulnerability in PHPgurukul Employee Record Management System 1.2
SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php.
network
low complexity
phpgurukul CWE-89
critical
 9.8
9.8
2021-12-01 CVE-2021-43451 SQL Injection vulnerability in PHPgurukul Employee Record Management System 1.2
SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.
network
low complexity
phpgurukul CWE-89
critical
 9.8
9.8
2021-07-20 CVE-2020-35427 SQL Injection vulnerability in PHPgurukul Employee Record Management System 1.1
SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication.
network
low complexity
phpgurukul CWE-89
critical
 9.8
9.8