CVE-2025-0846: 1000 Projects Employee Task Management System AdminLogin.php sql injection
First published: Thu Jan 30 2025(Updated: )
A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/AdminLogin.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| 1000projects Employee Task Management System | ||
| Employee Task Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0846?
CVE-2025-0846 has been classified as a critical vulnerability.
How does CVE-2025-0846 affect the system?
CVE-2025-0846 allows for SQL injection via manipulations of the email argument in the /admin/AdminLogin.php file.
How can I mitigate the risks associated with CVE-2025-0846?
To mitigate CVE-2025-0846, ensure that input sanitization and validation mechanisms are in place to prevent SQL injection.
Is CVE-2025-0846 exploitable remotely?
Yes, CVE-2025-0846 can be exploited remotely, making it a serious security concern.
What are the potential impacts of exploiting CVE-2025-0846?
Exploiting CVE-2025-0846 could lead to unauthorized access to sensitive data and compromise the integrity of the database.
- agent/weakness
- agent/title
- agent/references
- agent/author
- agent/source
- agent/description
- agent/first-publish-date
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- collector/nvd-api
- source/NVD
- agent/softwarecombine
- vendor/1000 projects
- canonical/1000projects employee task management system
- vendor/1000projects
- canonical/employee task management system
- version/employee task management system/1.0