CVE-2025-14193: code-projects Employee Profile Management System view_personnel.php sql injection
A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /viewpersonnel.php. Executing a manipulation of the argument perid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14193?
CVE-2025-14193 is classified as a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-14193?
To fix CVE-2025-14193, sanitize and validate the input to the per_id parameter in the /view_personnel.php file to prevent SQL injection.
Who is affected by CVE-2025-14193?
CVE-2025-14193 affects users of the code-projects Employee Profile Management System version 1.0.
Can CVE-2025-14193 be exploited remotely?
Yes, CVE-2025-14193 can be exploited remotely, allowing attackers to execute unauthorized SQL queries.
What type of vulnerability is CVE-2025-14193?
CVE-2025-14193 is an SQL injection vulnerability that arises from improper input handling in the application.