Security Advisory
CVE-2024-28595
9.8
CRITICAL
Vulnerability Description
SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the admin_id parameter in update-admin.php.
Published Date
March 19, 2024
Official Source
NIST NVD Advisory