CNNVD-202507-3349 Information

CNNVD ID

CNNVD-202507-3349

CVE-2025-8172

  • CNNVD Published: 2025-07-25

Description (Chinese)

itsourcecode Employee Management System是itsourcecode开源的一个员工管理系统。 itsourcecode Employee Management System 1.0版本存在注入漏洞,该漏洞源于文件/admin/index.php中参数Username的错误操作导致SQL注入。

Description (English)

Its sourcecode Employee Management System is an open-source employee management system. There is an injection loophole in version 1.0 of its sourcecode Employee Management System, which stems from the error of Username, the parameter in the document/admin/index.php, resulting in the SQL injection.

Hazard Level

High

Vulnerability Type

注入

Affected Vendor

itsourcecode

Published

2025-07-25

Last Modified

2026-02-24

References

https://github.com/XiaoJiesecqwq/CVE/issues/5 https://itsourcecode.com/ https://vuldb.com/?ctiid.317586 https://vuldb.com/?id.317586 https://vuldb.com/?submit.621482 https://access.redhat.com/security/cve/cve-2025-8172

Share on: