PT-2025-49406 · Code Projects · Employee Profile Management System

Xuanyuesanshi · Published 2025-12-07 · Updated 2026-02-24 · CVE-2025-14193

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Employee Profile Management System version 1.0

Description A flaw exists in the Employee Profile Management System that allows for remote code execution. The issue is located in the /view personnel.php file. Manipulation of the per id argument can lead to SQL injection. The exploit has been publicly disclosed.

Recommendations Apply any available updates to address the vulnerability in the affected version. As a temporary workaround, restrict access to the /view personnel.php file. Sanitize the per id input to prevent SQL injection attacks.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-14193

Affected Products

Employee Profile Management System

References · 11

• 🔥 https://github.com/shenxianyuguitian/employee-management-SQL · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14193 · Security Note
• https://osv.dev/vulnerability/CVE-2025-14193 · Vendor Advisory
• https://vuldb.com/?id.334613 · Note
• https://twitter.com/CVEnew/status/1997671144078401918 · Twitter Post
• https://t.me/cveNotify/145031 · Telegram Post
• https://vuldb.com/?ctiid.334613 · Note
• https://t.me/CVEtracker/39045 · Telegram Post
• https://vuldb.com/?submit.699245 · Note
• https://code-projects.org · Note
• https://t.me/cveNotify/152974 · Telegram Post