CVE-2026-7117: code-projects Employee Management System approve.php sql injection
A weakness has been identified in code-projects Employee Management System 1.0. Impacted is an unknown function of the file 370project/approve.php. Executing a manipulation of the argument id/token can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7117?
CVE-2026-7117 has a critical severity due to its potential for SQL injection, which can lead to unauthorized access and manipulation of the database.
How do I fix CVE-2026-7117?
To fix CVE-2026-7117, sanitize and parameterize all SQL queries in the approve.php file to prevent SQL injection attacks.
What systems are affected by CVE-2026-7117?
CVE-2026-7117 affects the Code-Projects Employee Management System version 1.0.
What type of vulnerability is CVE-2026-7117?
CVE-2026-7117 is an SQL injection vulnerability that arises from improper input validation.
Can CVE-2026-7117 lead to data breaches?
Yes, CVE-2026-7117 can lead to data breaches as attackers can exploit SQL injection to extract sensitive information from the database.