CVE-2025-6351: itsourcecode Employee Record Management System editprofile.php sql injection
A vulnerability was found in itsourcecode Employee Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /editprofile.php. The manipulation of the argument emp1name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6351?
CVE-2025-6351 has been rated as critical due to its potential to allow SQL injection attacks.
How does CVE-2025-6351 affect the Employee Record Management System?
CVE-2025-6351 affects the Employee Record Management System by enabling SQL injection through the emp1name parameter in /editprofile.php.
Can CVE-2025-6351 be exploited remotely?
Yes, CVE-2025-6351 can be exploited remotely by an attacker to manipulate database queries.
What version of the Employee Record Management System is affected by CVE-2025-6351?
CVE-2025-6351 affects version 1.0 of the itsourcecode Employee Record Management System.
What steps should be taken to mitigate CVE-2025-6351?
To mitigate CVE-2025-6351, ensure that input validation and prepared statements are implemented to prevent SQL injection.