5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A security flaw has been discovered in code-projects Employee Management System 1.0. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Basic Information
ID
CVE-2026-9450
Source
VulDB
Published
May 25, 2026 at 10:30
Affected Product
Vendor
code-projects
Product
Employee Management System
Version
1.0
Affected Versions
code-projects Employee Management System 1.0