CVE-2025-1167: Mayuri K Employee Management System Update_User.php sql injection
A vulnerability was found in Mayuri K Employee Management System up to 192.168.70.3 and classified as critical. Affected by this issue is some unknown functionality of the file /hrsoft/admin/UpdateUser.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1167?
CVE-2025-1167 is classified as a critical vulnerability.
How do I fix CVE-2025-1167?
To fix CVE-2025-1167, ensure you validate and sanitize input parameters in the /hr_soft/admin/Update_User.php file to prevent SQL injection.
What software versions are affected by CVE-2025-1167?
CVE-2025-1167 affects Mayuri K Employee Management System versions up to and including 192.168.70.3.
What types of attacks can CVE-2025-1167 lead to?
CVE-2025-1167 can lead to SQL injection attacks due to improper handling of input parameters.
Is user data at risk due to CVE-2025-1167?
Yes, user data may be compromised due to SQL injection vulnerabilities in CVE-2025-1167.