CVE-2025-14193

Name of the Vulnerable Software and Affected Versions code-projects Employee Profile Management System version 1.0

Description A flaw exists in the Employee Profile Management System that allows for remote code execution. The issue is located in the /view personnel.php file. Manipulation of the per id argument can lead to SQL injection. The exploit has been publicly disclosed.

Recommendations Apply any available updates to address the vulnerability in the affected version. As a temporary workaround, restrict access to the /view personnel.php file. Sanitize the per id input to prevent SQL injection attacks.