CVE-2026-9450: code-projects Employee Management System psubmit.php sql injection
A security flaw has been discovered in code-projects Employee Management System 1.0. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9450?
The severity of CVE-2026-9450 is classified as medium with a CVSS score of 6.3.
How does CVE-2026-9450 affect the Employee Management System?
CVE-2026-9450 allows for SQL injection via the pid parameter in the psubmit.php file, enabling remote exploitation.
What is the impact of exploiting CVE-2026-9450?
Exploiting CVE-2026-9450 could result in unauthorized access to the database, leading to data compromise.
How do I fix CVE-2026-9450?
To fix CVE-2026-9450, it is recommended to sanitize user input in the pid argument and implement prepared statements.
Is CVE-2026-9450 actively being exploited?
Yes, exploits for CVE-2026-9450 have been publicly released, indicating it is a target for attackers.