Vendors / Sherlock Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 2
Exploited now Sherlock records in CISA KEV No Sherlock vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00733 · Published 2024-02-14 · No fix listed CWE-89
Priority HIGH 82
An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00979 · Published 2024-02-14 · No fix listed CWE-89
Priority HIGH 82
Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0116 · Published 2023-08-09 · No fix listed CWE-89
Priority HIGH 70
A vulnerability has been found in code-projects Accounting System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-03-29 · No fix listed CWE-74
Priority HIGH 70
A flaw has been found in code-projects Accounting System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00334 · Published 2026-03-29 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was detected in code-projects Accounting System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00348 · Published 2026-03-29 · No fix listed CWE-74
Priority HIGH 67
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00716 · Published 2024-02-14 · No fix listed CWE-89
Priority HIGH 67
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00716 · Published 2024-02-14 · No fix listed CWE-89
Priority MEDIUM 60
A vulnerability was found in code-projects Online FIR System 1.0.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00566 · Published 2024-01-13 · No fix listed CWE-79
Priority MEDIUM 43
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0071 · Published 2024-02-14 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
4 2 4 0 0
THREATIST.IORead the docs