Carmelo Garcia

**Name of the Vulnerable Software and Affected Versions** code-projects Faculty Management System version 1.0 **Description** A critical issue affects the processing of the file /admin/pages/student-print.php, leading to sql injection. The attack may be initiated remotely. **Recommendations** For code-projects Faculty Management System version 1.0, consider restricting access to the /admin/pages/student-print.php file until a patch is available. Avoid using this file for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Employee Profile Management System version 1.0 **Description** A problematic vulnerability was found in the code-projects Employee Profile Management System. This issue affects the file download.php, where the manipulation of the `download file` argument leads to path traversal, specifically '../filedir'. The exploit has been publicly disclosed. **Recommendations** For code-projects Employee Profile Management System version 1.0, consider restricting access to the download.php file until a patch is available. As a temporary workaround, avoid using the `download file` argument in the download.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Employee Profile Management System version 1.0 **Description** A critical issue has been found in the Employee Profile Management System, affecting the processing of the file file table.php. The manipulation of the `per id` argument leads to SQL injection. **Recommendations** For code-projects Employee Profile Management System version 1.0, consider restricting access to the file file table.php to minimize the risk of exploitation. As a temporary workaround, avoid using the `per id` argument in the affected file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Employee Profile Management System version 1.0 **Description** A problematic issue was found in the code-projects Employee Profile Management System. The manipulation of the `pos name` argument in the file edit position query.php leads to cross-site scripting. This issue can be exploited remotely. **Recommendations** For code-projects Employee Profile Management System version 1.0, consider disabling the `pos name` argument in the edit position query.php file until a patch is available to prevent cross-site scripting attacks.