CVE-2025-14222: code-projects Employee Profile Management System print_personnel_report.php sql injection
A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /printpersonnelreport.php. This manipulation of the argument perid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14222?
The severity of CVE-2025-14222 is critical due to its potential for SQL injection, which can allow attackers to manipulate database queries.
How do I fix CVE-2025-14222?
To fix CVE-2025-14222, sanitize user inputs in the /print_personnel_report.php file to prevent SQL injection.
What software is affected by CVE-2025-14222?
CVE-2025-14222 affects the Employee Profile Management System version 1.0 developed by code-projects.
Can CVE-2025-14222 be exploited remotely?
Yes, CVE-2025-14222 can be exploited remotely, allowing attackers to execute SQL injection attacks from a distance.
What is the nature of the vulnerability in CVE-2025-14222?
CVE-2025-14222 is a SQL injection vulnerability caused by improper handling of the 'per_id' argument in a specific function.