CVE-2026-76764

A SQL injection vulnerability has been found in Employee Management System 1.0 in the file /process/applyleaveprocess.php. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability has been found in Employee Management System 1.0 in the file /psubmit.php. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability has been found in Employee Management System 1.0 in the file /changepassemp.php. The attack can be performed remotely and the exploit is publicly available.

XSS vulnerability in /applyleave.php in Employee Management System 1.0. Manipulation of the ID argument leads to cross-site scripting.

In code-projects Employee Management System 1.0, manipulation of the id/token argument in 370project/cancel.php leads to SQL injection. The attack can be carried out remotely, and the exploit has been publicly disclosed and may be used.

In code-projects Employee Management System 1.0, manipulation of the id/token argument in 370project/approve.php leads to SQL injection. The attack can be executed remotely, and the exploit has been made available to the public and could be used for attacks.

A security flaw has been discovered in code-projects Employee Management System 1.0 affecting the file 370project/mark.php, where manipulation results in cross-site scripting. Remote exploitation is possible, and the exploit has been released to the public and may be used in attacks.

In code-projects Employee Management System 1.0, manipulation of the ID argument in 370project/delete.php leads to SQL injection. The attack may be launched remotely, and the exploit is publicly available and might be used.

A vulnerability was found in code-projects Employee Management System 1.0 affecting the file 370project/edit.php. Manipulation of the ID argument causes SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed and may be used.

A vulnerability was identified in code-projects Employee Management System 1.0 affecting 370project/edit.php. Manipulation of the ID argument leads to cross-site scripting, the attack can be initiated remotely, and the exploit is publicly available.