CVE-2025-0846: 1000 Projects Employee Task Management System AdminLogin.php sql injection
A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/AdminLogin.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0846?
CVE-2025-0846 has been classified as a critical vulnerability.
How does CVE-2025-0846 affect the system?
CVE-2025-0846 allows for SQL injection via manipulations of the email argument in the /admin/AdminLogin.php file.
How can I mitigate the risks associated with CVE-2025-0846?
To mitigate CVE-2025-0846, ensure that input sanitization and validation mechanisms are in place to prevent SQL injection.
Is CVE-2025-0846 exploitable remotely?
Yes, CVE-2025-0846 can be exploited remotely, making it a serious security concern.
What are the potential impacts of exploiting CVE-2025-0846?
Exploiting CVE-2025-0846 could lead to unauthorized access to sensitive data and compromise the integrity of the database.