CVE-2025-8172: itsourcecode Employee Management System index.php sql injection
A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8172?
CVE-2025-8172 is classified as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-8172?
To fix CVE-2025-8172, ensure that your application sanitizes and validates the Username input to prevent SQL injection.
What software is affected by CVE-2025-8172?
CVE-2025-8172 affects the itsourcecode Employee Management System version 1.0.
Can CVE-2025-8172 be exploited remotely?
Yes, CVE-2025-8172 can be exploited remotely through SQL injection on the affected system.
What kind of attack is associated with CVE-2025-8172?
CVE-2025-8172 is associated with SQL injection attacks targeting the argument Username in the file /admin/index.php.