CVE-2025-6351

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in itsourcecode Employee Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /editprofile.php. The manipulation of the argument emp1name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jun 20, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-635126.5kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The CVE-2025-635136.5kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functi CVE-2025-635146.1kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter.CVE-2025-63529.1A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of th CVE-2025-635206.1Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).CVE-2025-635224.6Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function CVE-2025-635236.5FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticat CVE-2025-635258.8An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with escalated privileges vi CVE-2025-635265.4A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails to CVE-2025-635275.4A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and hprofile.php comp CVE-2025-635285.4A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the blooddinfo.php component. The applicati CVE-2025-635298.8A session fixation vulnerability exists in Blood Bank Management System 1.0 in login.php that allows an attacker to set or predict a user's